Repository navigation
rsyslog "message repeated N times" lines are undercounted or dropped on Ubuntu #2005
Description
Describe the bug
On Ubuntu, rsyslog collapses identical consecutive lines into a single message repeated N times: [ ... ] line. No hub parser handles that wrapper, so the repeated attempts are undercounted, or dropped entirely by parsers whose patterns are anchored with ^.
It seems that since Ubuntu 24.04 and 26.04 (I got it tested on ubuntu 26.04 and 24.04)
- 3 identical messages in a row are the minimum for the wrapper to appear: one in full, then the message repeated 2 times
- After that, N identical messages become 1 full line plus repeated N−1 times, so a parser that skips the wrapper only counts one attempt
| Identical msgs sent | What appears in syslog |
|---|---|
| 1 | the message, once |
| 2 | the message, twice (no summary line) |
| 3 | the message once, then message repeated 2 times: [...] |
| 5 | the message once, then message repeated 4 times: [...] |
| 10 | the message once, then message repeated 9 times: [...] |
Activity