linux 启动rsyslog服务_linux服务之rsyslog

日志片断分析

systemd:服务报出来的信息

kvm:内核模块kvm报出来的信息

kernel: tun: 内核的tun模块报出来的信息

kernel: br0: 内核的br0模块报出来的信息

kernel: kvm [1437] kvm进程为pid1437报出来的信息

Jul 31 11:00:01 localhost systemd: Starting Session 4 of user root.

Jul 31 11:01:01 localhost systemd: Started Session 5 of user root.

Jul 31 11:01:01 localhost systemd: Starting Session 5 of user root.

Jul 31 11:01:55 localhost kvm: 1 guest now active

Jul 31 11:01:55 localhost kernel: tun: Universal TUN/TAP device driver, 1.6

Jul 31 11:01:55 localhost kernel: tun: (C) 1999-2004 Max Krasnyansky

Jul 31 11:01:55 localhost kernel: device tap0 entered promiscuous mode

Jul 31 11:01:55 localhost kernel: br0: port 2(tap0) entered forwarding state

Jul 31 11:01:55 localhost kernel: br0: port 2(tap0) entered forwarding state

Jul 31 11:01:57 localhost kernel: kvm [1437]: vcpu0 disabled perfctr wrmsr: 0xc2 data 0xffff

Jul 31 11:01:57 localhost kernel: kvm [1437]: vcpu0 unhandled rdmsr: 0x570

Jul 31 11:02:10 localhost kernel: br0: port 2(tap0) entered forwarding state

Jul 31 11:02:17 localhost kernel: br0: port 2(tap0) entered disabled state

Jul 31 11:02:17 localhost kernel: device tap0 left promiscuous mode

Jul 31 11:02:17 localhost kernel: br0: port 2(tap0) entered disabled state

Jul 31 11:02:17 localhost kvm: 0 guests now active

Jul 31 11:02:33 localhost kvm: 1 guest now active

Jul 31 11:02:33 localhost kernel: device tap0 entered promiscuous mode

Jul 31 11:02:33 localhost kernel: br0: port 2(tap0) entered forwarding state

Jul 31 11:02:33 localhost kernel: br0: port 2(tap0) entered forwarding state

Jul 31 11:02:48 localhost kernel: br0: port 2(tap0) entered forwarding state

Jul 31 11:02:59 localhost kernel: kvm [1463]: vcpu0 disabled perfctr wrmsr: 0xc2 data 0xffff

Jul 31 11:02:59 localhost kernel: kvm [1463]: vcpu0 unhandled rdmsr: 0x570

Jul 31 11:03:36 localhost systemd: getty@tty1.service has no holdoff time, scheduling restart.

Jul 31 11:03:36 localhost systemd: Started Getty on tty1.

Jul 31 11:03:36 localhost systemd: Starting Getty on tty1...

Jul 31 11:03:58 localhost systemd-logind: New session 6 of user root.

Jul 31 11:03:58 localhost systemd: Started Session 6 of user root.

Jul 31 11:03:58 localhost systemd: Starting Session 6 of user root.

Jul 31 11:10:01 localhost systemd: Started Session 7 of user root.

Jul 31 11:10:01 localhost systemd: Starting Session 7 of user root.

Jul 31 11:11:46 localhost yum[1599]: Installed: pciutils-3.2.1-4.el7.x86_64

http://blog.csdn.net/hxh129/article/details/8089474

格式

日志设备(类型).(连接符号)日志级别   日志处理方式(action)　　其中连接符号有.|.=|.!三种

日志设备

注释

日志级别

注释

动作

注释