Double logging of every single password reset request

WP fail2ban Support
1

Double logging of every single password reset request event in /var/log/user.log file. The same thing was happening with ‘/var/log/syslog’. We have bandaid it for now by increasing the maxretry parameter. How do i fixt it permanently?

Jul 10 11:13:16 vultr wordpress(siteurl)[2453414]: Password reset requested for anuja.bagel from 77.111.245.14
Jul 10 11:13:16 vultr wordpress(siteurl)[2453414]: Password reset requested for anuja.bagel from 77.111.245.14

2

I think you’ve got something misconfigured with rsyslogd and/or systemd - I’ve tested on a standard Ubuntu install and it works fine. You can easily check your install:

$ logger "Hello, World!"

That uses user.notice by default so you’re testing like-for-like.

3

Thanks for the early reply

I did what you suggested and got following logs

syslog
Jul 14 11:36:39 vultr root: Hello, World!
user.log
Jul 14 11:36:39 vultr root: Hello, World!

Event is only registered once in both logfiles. So rsyslogd and/or systemd are configured correctly.

Can double logging happen if you are using woocommerce on your site?

4

I’ve tested it and yes, that would appear to be the case. I’ll add a work-around in the next release.