Doubled Entries in /var/log/messages

[abrist]

You may want to try restarting syslog:

Code: Select all

service rsyslog stop
killall rsyslog
service rsyslog start

[nseltzer]

This issue persists through reboots and syslogd appears to cycle normally.

Thanks,



Nic

[abrist]

You may want to open a ticket @ [email protected]. There we have you send us more detailed configs in confidentiality, as well as set up a remote session if needed.

[gwakem]

We found the issue. syslog.conf had the following:

Code: Select all

*.info;mail.none;authpriv.none;cron.none               /var/log/messages
# Per NSA RHEL Guide
auth,user.*                                                             /var/log/messages

The combo of *,info and user.* doubled the nagios related entries in the messages log. Thanks,

[abrist]

Fantastic. Cheers.