From: Johnson, Chad (CJohnson4@tiaa-cref.org)
Date: Fri Mar 17 2006 - 14:43:50 EST
By default syslogd is configured to not print duplicate messages. Its
behavior is to print a statement such as "last message repeated X times"
when a new (different event) comes in.
========= /var/adm/messages ===========
...
Mar 17 14:26:03 sqcdev su: [ID 810491 auth.crit] 'su root' failed for
johncha on /dev/pts/3
Mar 17 14:26:09 sqcdev last message repeated 3 times
Mar 17 14:26:53 sqcdev login: [ID 760094 auth.crit] REPEATED LOGIN
FAILURES ON /dev/pts/4 FROM localhost
Mar 17 14:34:22 sqcdev login: [ID 760094 auth.crit] REPEATED LOGIN
FAILURES ON /dev/pts/4 FROM 55555-brooks.wins.tiaa-cref.org
...
========= end /var/adm/messages ===========
In the example above the 'su root' failed for user 'johncha' three time
and then an alternate event came in causing the message "Mar 17 14:26:09
sqcdev last message repeated 3 times" to be printed followed by the new
event message.
I wish to disable this behavior and have all messages delivered
independently to /var/adm/messages. Several pages alluded to using the
'-m 0' argument to syslogd to turn off timestamp marking in the messages
file but this does not work as the value must be between 1 and
2147483647. Also, I like the 'mark' feature of timestamp insertion into
the messages file.
Does anyone know how to turn off message aggregation for syslogd?
TIA,
Chad Johnson
**************************************************************
This message, including any attachments, contains confidential information
intended for a specific individual and purpose, and is protected by law. If
you are not the intended recipient, please contact sender immediately by reply
e-mail and destroy all copies. You are hereby notified that any disclosure,
copying, or distribution of this message, or the taking of any action based on
it, is strictly prohibited.
TIAA-CREF
**************************************************************
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:39:19 EDT