EDR: Syslog notifications are not being sent due rate limiting

Recommend

Environment

Error in /var/log/messages:

Apr 29 14:30:07 localhost rsyslogd-2177: imuxsock begins to drop messages from pid <cb-enterprise PID> due to rate-limiting

The PID seen in /var/log/messages error is the same as the cb-enterprise PID. Verify:
```
ps -ef |grep cb-enterprise
```

This issue is caused when rsyslog rate limiting is enabled

Note: the changes below are external to Carbon Black and it is up to the customer to consider if this should be done or not.

Disable rate limiting by modifying /etc/rsyslog.conf to:

$SystemLogRateLimitInterval 0

$SystemLogRateLimitBurst 1000

Setting $SystemLogRateLimitInterval to 0 turns off rate limiting entirely
Setting $SystemLogRateLimitBurst to 1000 increases the threshold of the number of messages for rate limiting very high