rsyslogd日志丢失的解决

最近发现跑keepalived的几台机器的日志总是打印不完，还好给抛了一个报错，信息如下：

[root@yw_lvs2_backup etc]# tail -n 1000000 /var/log/messages-20130526 | grep "rate-limiting"
May 20 11:43:55 yw_lvs2_backup rsyslogd-2177: imuxsock begins to drop messages from pid 17131 due to rate-limiting
May 20 11:44:05 yw_lvs2_backup rsyslogd-2177: imuxsock lost 328 messages from pid 17131 due to rate-limiting
May 20 12:11:41 yw_lvs2_backup rsyslogd-2177: imuxsock begins to drop messages from pid 20261 due to rate-limiting
May 20 12:12:09 yw_lvs2_backup rsyslogd-2177: imuxsock lost 333 messages from pid 20261 due to rate-limiting
May 23 17:31:38 yw_lvs2_backup rsyslogd-2177: imuxsock begins to drop messages from pid 20261 due to rate-limiting
May 23 18:18:23 yw_lvs2_backup rsyslogd-2177: imuxsock lost 335 messages from pid 20261 due to rate-limiting
May 24 18:02:59 yw_lvs2_backup rsyslogd-2177: imuxsock begins to drop messages from pid 20261 due to rate-limiting
May 24 18:03:52 yw_lvs2_backup rsyslogd-2177: imuxsock lost 337 messages from pid 20261 due to rate-limiting
May 24 18:03:52 yw_lvs2_backup rsyslogd-2177: imuxsock begins to drop messages from pid 20261 due to rate-limiting
May 24 18:42:08 yw_lvs2_backup rsyslogd-2177: imuxsock lost 353 messages from pid 20261 due to rate-limiting

解决方案如下：

echo "$SystemLogRateLimitInterval 60" >> /etc/rsyslog.conf
echo "$SystemLogRateLimitBurst 3000" >> /etc/rsyslog.conf

重启rsyslog

/etc/init.d/rsyslog resart