服务器(9)--Linux之系统日志rsyslog转发

一、简介

RSYSLOG is the rocket-fast system for log processing.

It offers high-performance, great security features and a modular design. While it started as a regular syslogd, rsyslog has evolved into a kind of swiss army knife of logging, being able to accept inputs from a wide variety of sources, transform them, and output to the results to diverse destinations.

RSYSLOG can deliver over one million messages per second to local destinations when limited processing is applied (based on v7, December 2013). Even with remote destinations and more elaborate processing the performance is usually considered "stunning".

1、rsyslog 是一个快速处理收集系统日志的程序，提供了高性能、强大的安全特性和模块化设计

2、rsyslog 是syslog 的升级版，自centos6起，系统日志配置文件/etc/syslog.conf不再存在，取而代之的是/etc/rsyslog.conf

3、判断服务器上是否安装rsyslog，命令：rsyslogd -version

4、如果服务器上没有安装rsyslog，则安装，命令：yum install rsyslog -y

二、部署