linux日志管理

日志文件目录

/var/log/

日志分类

        系统日志  

            /var/log/messages  

Oct 10 09:04:29 localhost kernel: SELinux:  Initializing.
Oct 10 09:04:29 localhost kernel: Yama: becoming mindful.
Oct 10 09:04:29 localhost kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes)
Oct 10 09:04:29 localhost kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes)
Oct 10 09:04:29 localhost kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes)
Oct 10 09:04:29 localhost kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes)

        登录日志 

            /var/log/secure

Oct 16 17:02:49 localhost sshd[54297]: Bad protocol version identification '' from 192.168.0.1 port 28077
Oct 16 17:07:40 localhost gdm-password]: pam_unix(gdm-password:auth): conversation failed
Oct 16 17:07:40 localhost gdm-password]: pam_unix(gdm-password:auth): auth could not identify password for [linux]
Oct 16 17:07:40 localhost gdm-password]: gkr-pam: no password is available for user
Oct 16 17:07:46 localhost unix_chkpwd[54356]: password check failed for user (linux)

        邮件日志

            /var/log/maillog

Oct 10 10:09:39 localhost postfix/postfix-script[1780]: starting the P