Rsyslog duplicate logs (rsyslog.conf and rsyslog.d/something.conf)

Solution 1:

You can also use the 'final' option after your statements. Much easier.

local.0 /var/log/sea.log
&~

Solution 2:

Look at this line; $IncludeConfig /etc/rsyslog.d/*.conf. It shows up above all of the standard rules. You need to add local0.none to the /var/log/messages and /var/log/syslog rules in /etc/rsyslog.conf.