Bug #16376
closed
Some remote syslog messages are duplicated when "System Events" option is enabled
Added by Christopher Cope 7 months ago.
Updated about 2 months ago.
Plus Target Version:
25.11.1
Description
Tested on
25.07.1-RELEASE (amd64)
built on Wed Aug 13 1:59:00 EDT 2025
FreeBSD 15.0-CURRENT
With Status > System Logs > Settings set to send logs to a remote server it seems "System Events" also contains the same data as some of the other options.
Simply enabling "System Events" results in VPN Events, Netgate Nexus Events, and possibly others being sent. If "System Events" is enabled alongside the other options 2 copies of the same data is being sent.
- Status changed from New to Confirmed
Confirmed
25.07.1-RELEASE (amd64)
built on Fri Aug 15 11:42:00 PDT 2025
FreeBSD 15.0-CURRENT
Example:
Aug 17 18:13:36 pfha00 pfnet-controller[96013]: WARNING aeadtun: error reading from controltun0: EOF
Aug 17 18:13:36 pfha00 pfnet-controller[96013]: WARNING aeadtun: error reading from controltun0: EOF
Aug 17 18:13:36 pfha00 pfnet-controller[96013]: INFO Quitting main
Aug 17 18:13:36 pfha00 pfnet-controller[96013]: INFO Quitting main
Aug 17 18:13:36 pfha00 pfnet-controller[96013]: INFO Done shutting down main
Aug 17 18:13:36 pfha00 pfnet-controller[96013]: INFO Done shutting down main
Craig Coonrad wrote in #note-1:
Confirmed
[...]
Example:
[...]
Still waiting on this fix. It really really sucks having either duplicate entries or having to enable Everything to a remote syslog server. Can I please get this addressed soon? Thanks!
- Status changed from Confirmed to Feedback
- % Done changed from 0 to 100
Applied in changeset commit:06cbcea64fc066a169a99416ed877e9f204a83cc.
- Assignee set to Marcos M
- Target version set to 2.9.0
- Plus Target Version set to 26.03
- Status changed from Feedback to Resolved
Tested pfSense build 26.03.a.20260106.2058.
No longer seeing duplicate messages for ntpd, openvpn or pfnet-controller.
- Plus Target Version changed from 26.03 to 25.11.1
- Subject changed from With "System Events" enabled certain logs are duplicated on remote syslog to Some remote syslog messages are duplicated when "System Events" option is enabled
Also available in: Atom
PDF