Page 2 of 2
Re: Doubled Entries in /var/log/messages
Posted: Wed Feb 06, 2013 4:11 pm
by abrist
You may want to try restarting syslog:
Code: Select all
service rsyslog stop
killall rsyslog
service rsyslog start
Re: Doubled Entries in /var/log/messages
Posted: Wed Feb 06, 2013 4:18 pm
by nseltzer
This issue persists through reboots and syslogd appears to cycle normally.
Thanks,
Nic
Re: Doubled Entries in /var/log/messages
Posted: Wed Feb 06, 2013 5:05 pm
by abrist
You may want to open a ticket @
[email protected]. There we have you send us more detailed configs in confidentiality, as well as set up a remote session if needed.
Re: Doubled Entries in /var/log/messages
Posted: Wed Feb 06, 2013 5:20 pm
by gwakem
We found the issue. syslog.conf had the following:
Code: Select all
*.info;mail.none;authpriv.none;cron.none /var/log/messages
# Per NSA RHEL Guide
auth,user.* /var/log/messages
The combo of *,info and user.* doubled the nagios related entries in the messages log. Thanks,
Re: Doubled Entries in /var/log/messages
Posted: Wed Feb 06, 2013 5:25 pm
by abrist
Fantastic. Cheers.