topic RE: Disabling the syslog "last message repeated x times" message in ExtremeSwitching (EXOS/Switch Engine)

Disabling the syslog "last message repeated x times" message

David_Wilkinson — Wed, 28 May 2014 19:56:00 GMT

Hello,

I have some Extreme devices sending to a remote syslog server, Is there away to disable the "last message repeated x times" feature and have it send the whole message?

It's messing up our filtering on the remote syslog server
1) it doesn't send the hostname/ip address with the message
2) we don't know which message is getting repeated as we aggregate the syslog messages from all of our devices to provide a live view of the network.

Example of the message we see in our remote syslog is

May 25 23:04:38 exsshd: last message repeated 4 times
May 25 23:42:37 exsshd: last message repeated 4 times
May 26 00:45:19 SNMP.Master: last message repeated 2 times
May 26 01:15:58 exsshd: last message repeated 2 times

Ideally we need it to be the full message each time, eg

May 28 14:27:54 exsshd: SSH connection from sourc #012 has been denied by access-list mgmt_access. Rejecting connection.

Is this possible?

Thanks

RE: Disabling the syslog "last message repeated x times" message

Sumit_Tokle — Thu, 29 May 2014 21:34:00 GMT

On syslog server, you should see the switch IP address for all the log messages which are coming from switch. so you can see from which switch the messages are getting repeated.

You can not disable the "last messages repeated <#> times".

RE: Disabling the syslog "last message repeated x times" message

David_Wilkinson — Thu, 29 May 2014 21:39:00 GMT

That is part of the problem, I can see the switch IP for every message apart from the "last message repeated" ones.

All I know is that something repeated somewhere but not which device.

RE: Disabling the syslog "last message repeated x times" message

Sumit_Tokle — Thu, 29 May 2014 21:40:00 GMT

What is the switch model and software version?

RE: Disabling the syslog "last message repeated x times" message

David_Wilkinson — Thu, 29 May 2014 21:43:00 GMT

Extreme X480 and Extreme X670 running ExtremeXOS version 15.4.1.3 v1541b3-patch1-9

RE: Disabling the syslog "last message repeated x times" message

Sumit_Tokle — Thu, 29 May 2014 21:55:00 GMT

Report this issue to TAC. It could be software issue.