黑帽联盟

 找回密码
 会员注册
查看: 823|回复: 0
打印 上一主题 下一主题

[基础服务] message显示rsyslog日志服务警告信息due to rate-limiting

[复制链接]
yun 黑帽联盟官方人员 

920

主题

37

听众

1364

积分

超级版主

Rank: 8Rank: 8

  • TA的每日心情
    奋斗
    2019-10-18 11:20
  • 签到天数: 678 天

    [LV.9]以坛为家II

    /var/log/message日志大量这样的提示信息。应该rsyslog的配置记录超过最大值,修改syslog的配置文件来解决。
    1. Apr 23 16:11:53 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
    2. Apr 23 16:11:57 kkmail rsyslogd-2177: imuxsock lost 47 messages from pid 2002 due to rate-limiting
    3. Apr 23 16:25:04 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
    4. Apr 23 16:25:07 kkmail rsyslogd-2177: imuxsock lost 482 messages from pid 2002 due to rate-limiting
    5. Apr 23 17:27:31 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
    6. Apr 23 17:27:40 kkmail rsyslogd-2177: imuxsock lost 636 messages from pid 2002 due to rate-limiting
    7. Apr 23 17:56:43 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
    8. Apr 23 17:56:52 kkmail rsyslogd-2177: imuxsock lost 1395 messages from pid 2002 due to rate-limiting
    9. Apr 23 18:35:48 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
    10. Apr 23 18:35:51 kkmail rsyslogd-2177: imuxsock lost 498 messages from pid 2002 due to rate-limiting
    11. Apr 23 20:01:02 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
    12. Apr 23 20:01:06 kkmail rsyslogd-2177: imuxsock lost 409 messages from pid 1938 due to rate-limiting
    13. Apr 23 20:01:08 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
    14. Apr 24 00:01:00 kkmail rsyslogd-2177: imuxsock lost 385 messages from pid 1938 due to rate-limiting
    15. Apr 24 00:01:02 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
    16. Apr 24 00:01:06 kkmail rsyslogd-2177: imuxsock lost 421 messages from pid 1938 due to rate-limiting
    17. Apr 24 00:01:07 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
    18. Apr 24 03:43:08 kkmail logrotate: ALERT exited abnormally with [1]
    19. Apr 24 04:01:00 kkmail rsyslogd-2177: imuxsock lost 373 messages from pid 1938 due to rate-limiting
    20. Apr 24 04:01:02 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
    21. Apr 24 04:01:06 kkmail rsyslogd-2177: imuxsock lost 409 messages from pid 1938 due to rate-limiting
    22. Apr 24 04:01:07 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
    23. Apr 24 08:01:00 kkmail rsyslogd-2177: imuxsock lost 385 messages from pid 1938 due to rate-limiting
    24. Apr 24 08:01:02 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
    25. Apr 24 08:01:06 kkmail rsyslogd-2177: imuxsock lost 382 messages from pid 1938 due to rate-limiting
    26. Apr 24 08:01:07 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
    27. Apr 24 10:13:53 kkmail rsyslogd-2177: imuxsock lost 412 messages from pid 1938 due to rate-limiting
    28. Apr 24 10:13:56 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
    29. Apr 24 10:13:59 kkmail rsyslogd-2177: imuxsock lost 400 messages from pid 1938 due to rate-limiting
    30. Apr 24 10:14:00 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
    31. Apr 24 10:31:03 kkmail rsyslogd-2177: imuxsock lost 394 messages from pid 1938 due to rate-limiting
    32. Apr 24 10:33:56 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
    33. Apr 24 10:33:58 kkmail rsyslogd-2177: imuxsock lost 23 messages from pid 2002 due to rate-limiting
    34. Apr 24 10:44:03 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
    35. Apr 24 10:44:06 kkmail rsyslogd-2177: imuxsock lost 31 messages from pid 2002 due to rate-limiting
    36. Apr 24 10:49:52 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
    37. Apr 24 10:49:56 kkmail rsyslogd-2177: imuxsock lost 81 messages from pid 2002 due to rate-limiting
    38. Apr 24 10:51:52 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 2002 due to rate-limiting
    39. Apr 24 10:51:54 kkmail rsyslogd-2177: imuxsock lost 7 messages from pid 2002 due to rate-limiting
    40. Apr 24 10:59:04 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
    41. Apr 24 10:59:08 kkmail rsyslogd-2177: imuxsock lost 481 messages from pid 1938 due to rate-limiting
    42. Apr 24 10:59:09 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
    43. Apr 24 11:09:48 kkmail yum[11179]: Updated: 1:smartmontools-5.43-3.el6.x86_64
    44. Apr 24 11:58:12 kkmail rsyslogd-2177: imuxsock lost 313 messages from pid 1938 due to rate-limiting
    45. Apr 24 12:01:02 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
    46. Apr 24 12:01:06 kkmail rsyslogd-2177: imuxsock lost 520 messages from pid 1938 due to rate-limiting
    47. Apr 24 12:01:07 kkmail rsyslogd-2177: imuxsock begins to drop messages from pid 1938 due to rate-limiting
    48. Apr 24 13:07:14 kkmail rsyslogd-2177: imuxsock lost 274 messages from pid 1938 due to rate-limiting
    复制代码
    修改syslog的配置文件并确认:
    1. echo '$SystemLogRateLimitInterval 60' >> /etc/rsyslog.conf
    2. echo '$SystemLogRateLimitBurst 3000' >> /etc/rsyslog.conf
    复制代码
    重启rsyslog服务:
    1. /etc/init.d/rsyslog restart
    复制代码
    帖子永久地址: 

    黑帽联盟 - 论坛版权1、本主题所有言论和图片纯属会员个人意见,与本论坛立场无关
    2、本站所有主题由该帖子作者发表,该帖子作者与黑帽联盟享有帖子相关版权
    3、其他单位或个人使用、转载或引用本文时必须同时征得该帖子作者和黑帽联盟的同意
    4、帖子作者须承担一切因本文发表而直接或间接导致的民事或刑事法律责任
    5、本帖部分内容转载自其它媒体,但并不代表本站赞同其观点和对其真实性负责
    6、如本帖侵犯到任何版权问题,请立即告知本站,本站将及时予与删除并致以最深的歉意
    7、黑帽联盟管理员和版主有权不事先通知发贴者而删除本文

    您需要登录后才可以回帖 登录 | 会员注册

    发布主题 !fastreply! 收藏帖子 返回列表 搜索
    回顶部