The ratelimit configuration for the imjournal module does not work in rsyslogd on Red Hat Enterprise Linux 7
Issue
- The
ratelimit
was configured forimjournal
module ofrsyslogd
as below.
module(load="imjournal" StateFile="imjournal.state" WorkAroundJournalBug="on" ratelimit.interval="30" ratelimit.burst="140000")
- But, the messages were discarded more aggressively compared to the
ratelimit
configuration. - It started to drop messages clearly before receiving 140000 messages for 30 seconds.
Environment
- Red Hat Enterprise Linux 7
- rsyslog
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.