黑帽联盟

标题: message显示rsyslog日志服务警告信息due to rate-limiting [打印本页]

作者: yun    时间: 2019-9-21 14:47
标题: message显示rsyslog日志服务警告信息due to rate-limiting
/var/log/message日志大量这样的提示信息。应该rsyslog的配置记录超过最大值,修改syslog的配置文件来解决。
  1. Apr 23 16:11:53 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
  2. Apr 23 16:11:57 kkmail rsyslogd-2177: imuxsock lost 47 messages from pid 2002 due to rate-limiting
  3. Apr 23 16:25:04 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
  4. Apr 23 16:25:07 kkmail rsyslogd-2177: imuxsock lost 482 messages from pid 2002 due to rate-limiting
  5. Apr 23 17:27:31 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
  6. Apr 23 17:27:40 kkmail rsyslogd-2177: imuxsock lost 636 messages from pid 2002 due to rate-limiting
  7. Apr 23 17:56:43 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
  8. Apr 23 17:56:52 kkmail rsyslogd-2177: imuxsock lost 1395 messages from pid 2002 due to rate-limiting
  9. Apr 23 18:35:48 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
  10. Apr 23 18:35:51 kkmail rsyslogd-2177: imuxsock lost 498 messages from pid 2002 due to rate-limiting
  11. Apr 23 20:01:02 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
  12. Apr 23 20:01:06 kkmail rsyslogd-2177: imuxsock lost 409 messages from pid 1938 due to rate-limiting
  13. Apr 23 20:01:08 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
  14. Apr 24 00:01:00 kkmail rsyslogd-2177: imuxsock lost 385 messages from pid 1938 due to rate-limiting
  15. Apr 24 00:01:02 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
  16. Apr 24 00:01:06 kkmail rsyslogd-2177: imuxsock lost 421 messages from pid 1938 due to rate-limiting
  17. Apr 24 00:01:07 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
  18. Apr 24 03:43:08 kkmail logrotate: ALERT exited abnormally with [1]
  19. Apr 24 04:01:00 kkmail rsyslogd-2177: imuxsock lost 373 messages from pid 1938 due to rate-limiting
  20. Apr 24 04:01:02 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
  21. Apr 24 04:01:06 kkmail rsyslogd-2177: imuxsock lost 409 messages from pid 1938 due to rate-limiting
  22. Apr 24 04:01:07 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
  23. Apr 24 08:01:00 kkmail rsyslogd-2177: imuxsock lost 385 messages from pid 1938 due to rate-limiting
  24. Apr 24 08:01:02 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
  25. Apr 24 08:01:06 kkmail rsyslogd-2177: imuxsock lost 382 messages from pid 1938 due to rate-limiting
  26. Apr 24 08:01:07 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
  27. Apr 24 10:13:53 kkmail rsyslogd-2177: imuxsock lost 412 messages from pid 1938 due to rate-limiting
  28. Apr 24 10:13:56 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
  29. Apr 24 10:13:59 kkmail rsyslogd-2177: imuxsock lost 400 messages from pid 1938 due to rate-limiting
  30. Apr 24 10:14:00 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
  31. Apr 24 10:31:03 kkmail rsyslogd-2177: imuxsock lost 394 messages from pid 1938 due to rate-limiting
  32. Apr 24 10:33:56 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
  33. Apr 24 10:33:58 kkmail rsyslogd-2177: imuxsock lost 23 messages from pid 2002 due to rate-limiting
  34. Apr 24 10:44:03 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
  35. Apr 24 10:44:06 kkmail rsyslogd-2177: imuxsock lost 31 messages from pid 2002 due to rate-limiting
  36. Apr 24 10:49:52 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
  37. Apr 24 10:49:56 kkmail rsyslogd-2177: imuxsock lost 81 messages from pid 2002 due to rate-limiting
  38. Apr 24 10:51:52 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
  39. Apr 24 10:51:54 kkmail rsyslogd-2177: imuxsock lost 7 messages from pid 2002 due to rate-limiting
  40. Apr 24 10:59:04 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
  41. Apr 24 10:59:08 kkmail rsyslogd-2177: imuxsock lost 481 messages from pid 1938 due to rate-limiting
  42. Apr 24 10:59:09 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
  43. Apr 24 11:09:48 kkmail yum[11179]: Updated: 1:smartmontools-5.43-3.el6.x86_64
  44. Apr 24 11:58:12 kkmail rsyslogd-2177: imuxsock lost 313 messages from pid 1938 due to rate-limiting
  45. Apr 24 12:01:02 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
  46. Apr 24 12:01:06 kkmail rsyslogd-2177: imuxsock lost 520 messages from pid 1938 due to rate-limiting
  47. Apr 24 12:01:07 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
  48. Apr 24 13:07:14 kkmail rsyslogd-2177: imuxsock lost 274 messages from pid 1938 due to rate-limiting
复制代码
修改syslog的配置文件并确认:
  1. echo '$SystemLogRateLimitInterval 60' >> /etc/rsyslog.conf
  2. echo '$SystemLogRateLimitBurst 3000' >> /etc/rsyslog.conf
复制代码
重启rsyslog服务:
  1. /etc/init.d/rsyslog restart
复制代码





欢迎光临 黑帽联盟 (https://bbs.cnblackhat.com/) Powered by Discuz! X2.5