Summary: | Tenshi feature request: email rate limiting per log line.. | ||
---|---|---|---|
Product: | Gentoo Hosted Projects | Reporter: | Eric Brown <eric.brown> |
Component: | Tenshi | Assignee: | rob holland (RETIRED) <tigger> |
Status: | RESOLVED NEEDINFO | ||
Severity: | enhancement | CC: | lcars |
Priority: | High | ||
Version: | unspecified | ||
Hardware: | x86 | ||
OS: | Linux | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- |
Description
Eric Brown
2005-04-05 08:58:57 UTC
I don't think you really need that feature, here are 3 suggestions on how making things work without that: - summarize as much as possible, this way messages will be consolidated - don't use [now] in queue specifications, have periodic burts (especially for the alerts that you know will annoy you) and tune the crontab specifications accordingly - use the 'set limit' option in order to prevent huge warnings In my experience on all kind of servers I've found that tuning accordingly the regexp list and the queue timing solves this kind of problems and there's no need of complicating stuff with some thresholding feature. Please let us know what you think, I'll be happy to assist you in getting a good setup. Eric, any thoughts about my comment? closing as NEEDINFO for now. Sorry for taking so long to get back to you. about your suggestions: 1) summarize as much as possible I do this, it's fantastic! 2) don't use [now] I still need to use [now] mostly because I don't know what output to expect from certain programs (also the kernel has very diverse output). Mostly though, [now] is my catchall because if something out of the ordinary happens, I really want to know. 3) set limit I haven't set this yet because the length of the emails hasn't been a problem yet, just the frequency. Recently I just haven't had any more unexpectedly noisy daemons, so I haven't done anything to combat this problem. I suppose I could have an hourly queue for the catchall with a limit set, but it might hamper my response time if there was a real emergency. Anyway, thanks for the ideas. |