How to prevent log bombing using logback?

Question

I\'m not sure the term \"bombing\" is the right one. By bombing, I mean a log happening many times with the same content (message and args).

For example, a denial of ser

Answer 1

The DuplicateMessageFilter, which filters out exact duplicate messages, might fit your first requirement. Currently, the filter stops all duplicate messages after a specified threshold (via allowedRepititions setting), which might not be desirable. You would have to extend the filter if you preferred to have the duplicate-count to reset on new messages or based on time. It does not provide a summary of silenced logs, however.

Example logback config:

  

  
    
      %date [%thread] %-5level %logger - %msg%n