<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hi community,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am experiencing an issue while using journald, and I would like to inquire whether this is a known issue within the community.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The problem is I see duplicate log lines appearing in journald sometimes. It seems that certain log entries are being duplicated, which can make log analysis and troubleshooting quite challenging.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Before proceeding with any bug reports or further investigations, I wanted to reach out to the community to check if anyone else has experienced this issue or if there are any known workarounds or solutions. It's possible that this might
be a configuration-related problem or a known issue with a specific version of journald.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">For example "journalctl -f -o short-precise" shows a log stream like this:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Sep 01 19:24:12.198000 host app1[1234]: log_line_1 <--<o:p></o:p></p>
<p class="MsoNormal">Sep 01 19:24:12.206480 host app2[5678]: log_line_2<o:p></o:p></p>
<p class="MsoNormal">Sep 01 19:24:12.216570 host app3[9012]: log_line_3<o:p></o:p></p>
<p class="MsoNormal">Sep 01 19:24:12.198000 host app1[1234]: log_line_1 <-- repeated<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Both log entries from app1 seem to have identical fields except for the "__CURSOR" field.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Example:<o:p></o:p></p>
<p class="MsoNormal">cursor 1 --> {"__CURSOR":"s=1a903b70ee3546ed9aeb1d887f6744ed;i=19d76e;b=0727495496944c728dbb763733c88683;m=2bd97bcd0a;t=604515ba608c8;x=35f0437384026ee1"}<o:p></o:p></p>
<p class="MsoNormal">cursor 2 --> {"__CURSOR":"s=1a903b70ee3546ed9aeb1d887f6744ed;i=19d76f;b=0727495496944c728dbb763733c88683;m=2bd97bcd0a;t=604515ba608c8;x=35f0437384026ee1"}<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">For this example, app1 uses facility local0 and apps 2 & 3 use facility daemon.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Systemd version: 250.4<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">If you are aware of this problem or have any insights on how to address it, I would greatly appreciate your guidance. Alternatively, if this is not a known issue, I am willing to provide additional information and collaborate on diagnosing
and resolving this issue together with the community.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you for your time and consideration. I look forward to your response and any assistance you can provide.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Best regards,<o:p></o:p></p>
<p class="MsoNormal">Swaroop.<o:p></o:p></p>
</div>
</body>
</html>