NetworkManager flooding syslog after non-related updates

elMoco · 07-02-2021, 05:25 AM

Hi!

I updated today slackware-current with the last week changes, and none of them were related to NetworkManager, and I realised my message file was growing too much. Checking it, I had tons of lines like:

Code:

Jul  2 10:11:39 liet NetworkManager[17310]: <info>  [1625217099.7318] audit: op="statistics" arg="refresh-rate-ms" pid=5773 uid=1973 result="success"

I had made no changes to NetworkManager configuration, and I checked if the messages were new or they were there before and (today, only from 7:55 to 10:11 IST):

Code:

      2 Jun 27
     30 Jun 28
      2 Jul  1
4238893 Jul  2

I could not find any reason for this and I solved it by changing the loglevel for AUDIT to WARN from INFO. But I had no change it before, it was always using the default value.

I guess any of the updates I installed today (probably the kernel) caused a change in the AUDIT logs, but I don't know yet.

The thing is guys, have a look on your log files, specially if you see you are running out of free disk.

Regards
Jesus M

allend · 07-02-2021, 09:32 PM

There is no indication of the network device in use in your post, but perhaps this is relevant.

elMoco · 07-03-2021, 04:23 AM

Quote:

Originally Posted by allend

There is no indication of the network device in use in your post, but perhaps this is relevant.

The network is working perfectly well, no problem at all.

The only 'issue' was the message file being flooded by NetworkManager audit entries, and that was 'fixed' by changing the log level for AUDIT from INFO to WARN.