Log Design

最新推荐文章于 2024-10-02 16:50:28 发布

hillMover

最新推荐文章于 2024-10-02 16:50:28 发布

阅读量1.1k

点赞数

文章标签： security file action access linux

本文链接：https://blog.csdn.net/hillMover/article/details/2087166

版权

[Author] Dirk Xu
本文翻译为学习和兴趣所致，任何单位或个人对下文的转载，请注明原文出处。一切后果，本人概不负责。时间所限，译文若有错误，请指正。

How to design log?
1. when    where    who    action
2. access permission, security
3. different log files for log different things to different users
4. distributed
5. logrotate
6. log config file
component.[loglevel]    where

Linux Log:
#ps aux | grep syslog

#vi /etc/syslog.conf
#/etc/init.d/syslog restart

#chattr +a /var/log/messages
#lsattr /var/log/messages

host:
#grep 514 /etc/services
#vi /etc/sysconfig/syslog
   SYSLOGD_OPTIONS="-m 0 -r"
#/etc/init.d/syslog restart
#netstat -tlunp

client:
#vi /etc/syslog.conf
    *.* @192.168.1.100

#/etc/logrotate.conf
#/etc/logrotate.d/

#vi /etc/logrotate.conf
   <log-file1>[ log-file2]* {
       [monthly|weekly]
       [rotate <num>]
       [create <permission> <owner> <group>]
       [compress]
       [sharedscripts
       prerotate|postrotate
               <script ...>
       endscript]
   }

#logrotate [-vf] log-conf
-v : verbose
-f : force

#logrotate -v /etc/logrotate.conf

#chattr +a /var/log/demo.log
#lsattr /var/log/demo.log
#vi /etc/logrotate.d/demo
   /var/log/demo.log{
       monthly
       size=10M
       rotate 5
       nocompress
       sharedscripts
       prerotate
           /usr/bin/chattr -a /var/log/demo.log
       endscript
       sharedscripts
       postrotate
           /usr/bin/killall -HUP syslogd
           /usr/bin/chattr +a /var/log/demo.log
       endscript
   }
#logrotate -v /etc/logratate.conf
#logrotate -vf /etc/logrotate.d/demo
#lsattr /var/log/demo.log*

#dmesg

#last [-num | -n num] [-f file]

#lastlog