如何阻止Kern.log和Syslog过度增长

Question

我遇到这个问题，在Ubuntu20.04的新安装中，我的kern.log和syslog文件每小时都会变大。它总是相同的行，我有一个Wifi适配器，我不明白我做错了什么，当我安装它。有一些原木

Kern.log

Mar 18 07:38:46 STARSHIP kernel: [    5.645129] Generic FE-GE Realtek PHY r8169-400:00: attached PHY driver [Generic FE-GE Realtek PHY] (mii_bus:phy_addr=r8169-400:00, irq=IGNORE)
Mar 18 07:38:46 STARSHIP kernel: [    5.801212] aufs 5.x-rcN-20200622
Mar 18 07:38:46 STARSHIP kernel: [    5.833050] r8169 0000:04:00.0 enp4s0: Link is Down
Mar 18 07:38:47 STARSHIP kernel: [    6.279906] pcieport 0000:00:1c.5: AER: Corrected error received: 0000:00:1c.5
Mar 18 07:38:47 STARSHIP kernel: [    6.279924] pcieport 0000:00:1c.5: AER: PCIe Bus Error: severity=Corrected, type=Physical Layer, (Receiver ID)
Mar 18 07:38:47 STARSHIP kernel: [    6.279926] pcieport 0000:00:1c.5: AER:   device [8086:a295] error status/mask=00000001/00002000
Mar 18 07:38:47 STARSHIP kernel: [    6.279927] pcieport 0000:00:1c.5: AER:    [ 0] RxErr
Mar 18 07:38:47 STARSHIP kernel: [    6.279941] pcieport 0000:00:1c.5: AER: Corrected error received: 0000:00:1c.5
Mar 18 07:38:47 STARSHIP kernel: [    6.279955] pcieport 0000:00:1c.5: AER: can't find device of ID00e5
Mar 18 07:38:47 STARSHIP kernel: [    6.279956] pcieport 0000:00:1c.5: AER: Corrected error received: 0000:00:1c.5
Mar 18 07:38:47 STARSHIP kernel: [    6.279969] pcieport 0000:00:1c.5: AER: can't find device of ID00e5
Mar 18 07:38:47 STARSHIP kernel: [    6.279970] pcieport 0000:00:1c.5: AER: Corrected error received: 0000:00:1c.5
Mar 18 07:38:47 STARSHIP kernel: [    6.279985] pcieport 0000:00:1c.5: AER: can't find device of ID00e5
Mar 18 07:38:47 STARSHIP kernel: [    6.279986] pcieport 0000:00:1c.5: AER: Multiple Corrected error received: 0000:00:1c.5

赛斯洛

Mar 18 07:38:54 STARSHIP kernel: [   13.164969] pcieport 0000:00:1c.5: AER: Multiple Corrected error received: 0000:00:1c.5
Mar 18 07:38:54 STARSHIP kernel: [   13.164978] pcieport 0000:00:1c.5: AER: PCIe Bus Error: severity=Corrected, type=Physical Layer, (Receiver ID)
Mar 18 07:38:54 STARSHIP kernel: [   13.164979] pcieport 0000:00:1c.5: AER:   device [8086:a295] error status/mask=00000001/00002000
Mar 18 07:38:54 STARSHIP kernel: [   13.164980] pcieport 0000:00:1c.5: AER:    [ 0] RxErr
Mar 18 07:38:54 STARSHIP kernel: [   13.164990] pcieport 0000:00:1c.5: AER: Corrected error received: 0000:00:1c.5
Mar 18 07:38:54 STARSHIP kernel: [   13.165041] pcieport 0000:00:1c.5: AER: can't find device of ID00e5
Mar 18 07:38:54 STARSHIP kernel: [   13.165063] pcieport 0000:00:1c.5: AER: Corrected error received: 0000:00:1c.5
Mar 18 07:38:54 STARSHIP kernel: [   13.165069] pcieport 0000:00:1c.5: AER: PCIe Bus Error: severity=Corrected, type=Physical Layer, (Receiver ID)
Mar 18 07:38:54 STARSHIP kernel: [   13.165070] pcieport 0000:00:1c.5: AER:   device [8086:a295] error status/mask=00000001/00002000
Mar 18 07:38:54 STARSHIP kernel: [   13.165071] pcieport 0000:00:1c.5: AER:    [ 0] RxErr

如果能帮助解决这个问题，我们将不胜感激。

Answer 1

当您在日志中获得错误消息时，最好的选择是始终找出根本问题所在。

但是，如果一切看起来都正常，而且您仍然在日志中被垃圾处理，这就是过滤这些消息的方法：

1. 在/etc/rsyslog.d中创建一个新文件(在这里我使用名称01-block-pcieport.conf) sudo touch /etc/rsyslog.d/01-block-pcieport.conf
2. 在01-block-pcieport.conf if $msg contains "pcieport 0000:00:1c.5" then { stop }中输入以下内容

这将过滤掉与pcieport 0000:00:1c.5相关的所有日志消息，您将不再能够使用这些日志对此设备进行故障排除。

因此，在过滤出这样的消息之前，最好先找出潜在的原因。我想知道这是否是司机的问题？我觉得你应该先调查一下。