Log Design

[Author] Dirk Xu
本文翻译为学习和兴趣所致，任何单位或个人对下文的转载，请注明原文出处。一切后果，本人概不负责。时间所限，译文若有错误， 请指正。

How to design log?
1. when    where    who    action
2. access permission, security
3. different log files for log different things to different users
4. distributed
5. logrotate
6. log config file
component.[loglevel]    where

Linux Log:
#ps aux | grep syslog

#vi /etc/syslog.conf
#/etc/init.d/syslog restart

#chattr +a /var/log/messages
#lsattr /var/log/messages

host:
#grep 514 /etc/services
#vi /etc/sysconfig/syslog
    SYSLOGD_OPTIONS="-m 0 -r"
#/etc/init.d/syslog restart
#netstat -tlunp

client:
#vi /etc/syslog.conf
    *.* @192.168.1.100

#/etc/logrotate.conf
#/etc/logrotate.d/

#vi /etc/logrotate.conf
    <log-file1>[ log-file2]* {
        [monthly|weekly]
        [rotate <num>]
        [create <permission> <owner> <group>]
        [compress]
        [sharedscripts
        prerotate|postrotate
                <script ...>
        endscript]
    }

#logrotate [-vf] log-conf
-v : verbose
-f : force

#logrotate -v /etc/logrotate.conf


#chattr +a /var/log/demo.log
#lsattr /var/log/demo.log
#vi /etc/logrotate.d/demo
    /var/log/demo.log{
        monthly
        size=10M
        rotate 5
        nocompress
        sharedscripts
        prerotate
            /usr/bin/chattr -a /var/log/demo.log
        endscript
        sharedscripts
        postrotate
            /usr/bin/killall -HUP syslogd
            /usr/bin/chattr +a /var/log/demo.log
        endscript
    }
#logrotate -v /etc/logratate.conf
#logrotate -vf /etc/logrotate.d/demo
#lsattr /var/log/demo.log*

#dmesg

#last [-num | -n num] [-f file]

#lastlog