Why malformed messages are being written by RSYSLOG daemon?
Issue
- We found some malformed messages in the log files managed by rsyslogd.
- In each malformed message, two different messages are concatenated.
- For example:
Jan 1 00:00:00 node1 Jan 1 00:00:00 node2.example.com message ...
- In this case, the following two messages are cancatenated, and the first message is not a completed message.
- Jan 1 00:00:00 node1
- Jan 1 00:00:00 node2.example.com message ...
- How did you avoid this problem?
Environment
- Red Hat Enterprise Linux (RHEL) 6
- rsyslog
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.