Hi
Is there a way to disable the “excessive broadcast/multicast…” message in the log?
I’ve got several hundred Mbps of legitimate Multicast traffic on an Interface, which may look like a Loop to the Router.
This message fills the whole log, which is annoying.
Thanks,
Mat
Look at the topics for the event and note the topics.
dec/10/2015 20:43:19 system,error,critical login failure for user admin via local
The topics on this log entry are system, error, and critical.
If I wanted to suppress these from the disk log, I would redirect them to their own log file by creating a new log action “system errors” and then modify the error logging rule by adding !system as a criteria.
Then I would add a new rule that matches system,error events with the action of “system errors”
Thanks for the idea.
But I was thinking of a threshold level which could be adjusted or something.
If I send all “interface,warning” messages in a different file, I could possibly miss other messages.
True - I’d say, then, that a central syslog server with plenty of storage and a more featureful log browsing / rolling / de-duplication system is going to pretty much be your only option.