> Source: [sk119913](https://support.checkpoint.com/results/sk/sk119913)

# sk119913 - syslog shows "last message repeated X times" in /var/log/messages

| Property | Value |
|----------|-------|
| Solution ID | sk119913 |
| Date Created | 2017-08-20 |
| Last Modified | 2019-05-07 |
| Technical Level | Advanced |
| Products | Security Gateway, Security Management Server |
| Versions | R82.10, R82, R81.20, R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * An event which is logged in /var/log/messages is generated multiple times in consecutive order, and the syslog daemon compresses all repeated attempts with entry "last message repeated X times" in /var/log/messages file.
* Example:  
  `[DATE TIME] [SGW_Name] sshd[3561]: Failed password for admin from 10.110.2.151 port 9807 ssh2`  
  `
  [DATE TIME] [SGW_Name] last message repeated 2 times`

## Cause

Compressing consecutive events into one entry "last message repeated X times" is default behavior for syslog.

Syslog daemon integrated into Check Point software does not support the syslog flags ( -c, -cc ) to "uncompress/decompress" the syslog event messages.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content