elk显示每天0点会有一个502的尖峰,奇怪怎么会有502。
由于对rancher不熟,怀疑是不是rancher在做什么daemon process。
然后去查/var/log/message系统日志,查到了一些这样的日志:
Jan 3 00:00:01 rc02 systemd: Started Session 108334 of user root.
Jan 3 00:00:01 rc02 systemd: Starting Session 108334 of user root.
Jan 3 00:00:01 rc02 systemd: Started Session 108335 of user root.
Jan 3 00:00:01 rc02 systemd: Starting Session 108335 of user root.
Jan 3 00:00:01 rc02 systemd: Started Session 108336 of user root.
Jan 3 00:00:01 rc02 systemd: Starting Session 108336 of user root.
Jan 3 00:00:01 rc02 systemd: Started Session 108338 of user root.
Jan 3 00:00:01 rc02 systemd: Starting Session 108338 of user root.
Jan 3 00:00:01 rc02 systemd: Started Session 108339 of user root.
Jan 3 00:00:01 rc02 systemd: Starting Session 108339 of user root.
Jan 3 00:00:01 rc02 systemd: Started Session 108337 of user root.
Jan 3 00:00:01 rc02 systemd: Starting Session 108337 of user root.
Ja