最近发现跑keepalived的几台机器的日志总是打印不完,还好给抛了一个报错,信息如下:

[root@yw_lvs2_backup etc]# tail -n 1000000 /var/log/messages-20130526 | grep "rate-limiting"
May 20 11:43:55 yw_lvs2_backup rsyslogd-2177: imuxsock begins to drop messages from pid 17131 due to rate-limiting
May 20 11:44:05 yw_lvs2_backup rsyslogd-2177: imuxsock lost 328 messages from pid 17131 due to rate-limiting
May 20 12:11:41 yw_lvs2_backup rsyslogd-2177: imuxsock begins to drop messages from pid 20261 due to rate-limiting
May 20 12:12:09 yw_lvs2_backup rsyslogd-2177: imuxsock lost 333 messages from pid 20261 due to rate-limiting
May 23 17:31:38 yw_lvs2_backup rsyslogd-2177: imuxsock begins to drop messages from pid 20261 due to rate-limiting
May 23 18:18:23 yw_lvs2_backup rsyslogd-2177: imuxsock lost 335 messages from pid 20261 due to rate-limiting
May 24 18:02:59 yw_lvs2_backup rsyslogd-2177: imuxsock begins to drop messages from pid 20261 due to rate-limiting
May 24 18:03:52 yw_lvs2_backup rsyslogd-2177: imuxsock lost 337 messages from pid 20261 due to rate-limiting
May 24 18:03:52 yw_lvs2_backup rsyslogd-2177: imuxsock begins to drop messages from pid 20261 due to rate-limiting
May 24 18:42:08 yw_lvs2_backup rsyslogd-2177: imuxsock lost 353 messages from pid 20261 due to rate-limiting

于是百度之,未果,谷歌一番终于明白这么回事了,解决方案如下:

 

echo ‘$SystemLogRateLimitInterval 60’ >> /etc/rsyslog.conf
echo ‘$SystemLogRateLimitBurst 3000’ >> /etc/rsyslog.conf
重启rsyslog
/etc/init.d/rsyslog resart