[Bug 1837076] [NEW] RepeatedMsgReduction should be off by default

[Msd]

Public bug reported:

Maintainers explains that this option should be off :
https://www.rsyslog.com/doc/master/configuration/action/rsconf1_repeatedmsgreduction.html

> This parameter models old sysklogd legacy. Note that many people, including the rsyslog authors, consider this to be a misfeature. [...]
> - While turning this feature on can save some space in logs, most log analysis tools need to see the repeated messages, they can’t handle the “last message repeated” format.
> - This is a feature that worked decades ago when logs were small and reviewed by a human, it fails badly on high volume logs processed by tools. [...]
> This turns on repeated message reduction (not recommended):
> `$RepeatedMsgReduction on    # do not log repeated messages`

So I think this option should be off by default in Ubuntu.

This option is Off in Debian 10.

Is there a reason why this is option is on on Ubuntu ?

** Affects: rsyslog (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to rsyslog in Ubuntu.
https://bugs.launchpad.net/bugs/1837076

Title:
  RepeatedMsgReduction should be off by default

Status in rsyslog package in Ubuntu:
  New

Bug description:
  Maintainers explains that this option should be off :
  https://www.rsyslog.com/doc/master/configuration/action/rsconf1_repeatedmsgreduction.html

  > This parameter models old sysklogd legacy. Note that many people, including the rsyslog authors, consider this to be a misfeature. [...]
  > - While turning this feature on can save some space in logs, most log analysis tools need to see the repeated messages, they can’t handle the “last message repeated” format.
  > - This is a feature that worked decades ago when logs were small and reviewed by a human, it fails badly on high volume logs processed by tools. [...]
  > This turns on repeated message reduction (not recommended):
  > `$RepeatedMsgReduction on    # do not log repeated messages`

  So I think this option should be off by default in Ubuntu.

  This option is Off in Debian 10.

  Is there a reason why this is option is on on Ubuntu ?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/1837076/+subscriptions