-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 2017-08-17 08:46, senaps via rsyslog wrote: > Aug 17 11:13:50 HP-Test journal: Suppressed 722551 messages from > /user.slice/user-0.slice
Your journald is rate limiting. Check your journald config file (typically /etc/systemd/journald.conf) for RateLimitInterval and RateLimitBurst. Like David already said: For best performance try to avoid/bypass systemd/journald completely. Remember that journald has to maintain a database... if you are processing logs with rsyslog, especially on a centralized syslog server, you don't want double processing. - -- Regards, Thomas -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0 iQJ8BAEBCgBmBQJZlijqXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQzM0M1ODQ4MkM0MDIyOTJEMkUzQzVDMDY5 NzA5RjkwQzNDOTZGRkM4AAoJEJcJ+Qw8lv/ICI8P/04q9QaSn+GUoPs9Lj3bYFq0 hUnSwjJXvOlZ6aufMZhVwlxgTVHvlx4dJwSRTc314dyLsMLlAQHCRc6m/yNk+AEs Klbqdj5Tx/zD9ZcUutbpPpu6CZEkfgD8AUOeT7GdnGy8cNlMsyJSzOplwmcBMuFm juNGFQGlzZQdc5rTqOLdaaRS0+9p1T64UXetPltLUSTvxN8WOMiejltE1b2+jJ/l saNTsAbgMqO8rwIr0caBnH6CmbgwJA68aUOLM9zaROmcG9hMGL3OXzxZchkFf0Av AAhguPYlOEoanJ8hpMkyE+4qEska3n8IBRHMuHGm990wloCazJRiKOogxV1PHRHu 7r11gLkgv+yOPsFSHOAm1U3YVk+f/cc07CJVQDHHy3Rxdjrplr4VOOaf9d4PqODA 98DSwwT9LtBQ5Jz19oMYDY/Vxzfsh4gO4cBsEWbe3vFwjWtjs2ix1pJ5iQwjeL/1 2HZQZMI3m04fyAK+gmzdfmKBph5oMgmBKoH5kJK/yadX3XjkPJ8yOuc6zkH+e/3O wAgMCSBEZXWjVQMPSTQCiunX9iQ2yyAnkQ4AC5gRS7LJPr82MG2uSjOeo2CWXVMp p/wQhUb1Lg8Y4Bdg7g9YhlsR5YNfZupspRyPXfaLZkxiTGUhLY/VH3vh/am44LTU O0SRck88MJ30VMCNx6DV =hDqk -----END PGP SIGNATURE----- _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
