This module can be used to filter out repeating messages. Like Syslog daemons, this module checks the previous message against the current. If they match, the current message is dropped. The module waits one second for duplicated messages to arrive. If duplicates are detected, the first message is forwarded, the rest are dropped, and a message containing "last message repeated n times" is sent instead.
|This module has been deprecated and will be removed in a future release. The functionality of this module can be implemented with Variables.|
|To examine the supported platforms, see the list of installer packages in the Available Modules chapter.|
The pm_norepeat module accepts the following directives in addition to the common module directives.
This optional directive takes a comma-separated list of field names which are used to compare log messages. Only the fields listed here are compared, the others are ignored. For example, the
$EventTimefield will be different in repeating messages, so this field should not be used in the comparison. If this directive is not specified, the default field to be checked is
The following fields are used by pm_norepeat.
A string containing the
last message repeated n timesmessage.
The time of the last event or the current time if EventTime was not present in the last event.
The process ID of the NXLog process.
The severity name:
The INFO severity level value:
This configuration reads log messages from the socket.
$Message fields are used to detect duplicates.
Then the messages are written to file.
<Input uds> Module im_uds UDS /dev/log </Input> <Processor norepeat> Module pm_norepeat CheckFields Hostname, SourceName, Message </Processor> <Output file> Module om_file File "/var/log/messages" </Output> <Route uds_to_file> Path uds => norepeat => file </Route>