Bug #16376
closed
With "System Events" enabled certain logs are duplicated on remote syslog
100%
Description
Tested on
25.07.1-RELEASE (amd64) built on Wed Aug 13 1:59:00 EDT 2025 FreeBSD 15.0-CURRENT
With Status > System Logs > Settings set to send logs to a remote server it seems "System Events" also contains the same data as some of the other options.
Simply enabling "System Events" results in VPN Events, Netgate Nexus Events, and possibly others being sent. If "System Events" is enabled alongside the other options 2 copies of the same data is being sent.
Updated by Craig Coonrad 5 months ago
- Status changed from New to Confirmed
Confirmed
25.07.1-RELEASE (amd64) built on Fri Aug 15 11:42:00 PDT 2025 FreeBSD 15.0-CURRENT
Example:
Aug 17 18:13:36 pfha00 pfnet-controller[96013]: WARNING aeadtun: error reading from controltun0: EOF Aug 17 18:13:36 pfha00 pfnet-controller[96013]: WARNING aeadtun: error reading from controltun0: EOF Aug 17 18:13:36 pfha00 pfnet-controller[96013]: INFO Quitting main Aug 17 18:13:36 pfha00 pfnet-controller[96013]: INFO Quitting main Aug 17 18:13:36 pfha00 pfnet-controller[96013]: INFO Done shutting down main Aug 17 18:13:36 pfha00 pfnet-controller[96013]: INFO Done shutting down main
Updated by John Pitton 16 days ago
Craig Coonrad wrote in #note-1:
Confirmed
[...]Example:
[...]
Still waiting on this fix. It really really sucks having either duplicate entries or having to enable Everything to a remote syslog server. Can I please get this addressed soon? Thanks!
Updated by Marcos M 9 days ago
- Status changed from Confirmed to Feedback
- % Done changed from 0 to 100
Applied in changeset 06cbcea64fc066a169a99416ed877e9f204a83cc.
Updated by Craig Coonrad 9 days ago
- Status changed from Feedback to Resolved
Tested pfSense build 26.03.a.20260106.2058.
No longer seeing duplicate messages for ntpd, openvpn or pfnet-controller.