linux- 日志管理

最新推荐文章于 2024-07-24 17:55:42 发布

苏木三少

最新推荐文章于 2024-07-24 17:55:42 发布

阅读量819

点赞数 1

分类专栏： Linux 文章标签： linux 运维

本文链接：https://blog.csdn.net/weixin_49049296/article/details/116173300

版权

本文介绍了Linux系统中日志管理的重要性，包括如何查看和解析服务器日志，详细讲解了rsyslogd和logrotate这两个产生和管理日志的程序。通过安装、启动和配置rsyslogd，确保日志记录正常。同时，讨论了日志轮转的概念，用于节省服务器存储空间，通常根据系统时间或文件大小进行轮转。

摘要由CSDN通过智能技术生成

1、查看现场服务器的日志，各日志代表详解

### 系统日志
[root@localhost opt]# tailf /var/log/messages
Apr 26 21:08:56 localhost systemd: Reloading.
Apr 26 21:09:01 localhost systemd: Started Session 10 of user root.
Apr 26 21:09:01 localhost kernel: sh (47752): drop_caches: 3
Apr 26 21:09:15 localhost systemd: Reloading.
Apr 26 21:09:15 localhost yum[48081]: Installed: httpd-2.4.6-97.el7.centos.x86_64
Apr 26 21:10:01 localhost systemd: Started Session 12 of user root.
Apr 26 21:10:01 localhost systemd: Started Session 11 of user root.
Apr 26 21:10:01 localhost kernel: sh (50564): drop_caches: 3
Apr 26 21:11:01 localhost systemd: Started Session 13 of user root.
Apr 26 21:11:01 localhost kernel: sh (53376): drop_caches: 3
^C
### 相关认证和安全的日志
[root@localhost opt]# tailf /var/log/secure
Apr 26 20:57:41 localhost sshd[15582]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 26 20:57:45 localhost sshd[15733]: Accepted password for root from 192.168.48.1 port 55290 ssh2
Apr 26 20:57:45 localhost sshd[15733]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 26 21:02:05 localhost polkitd[871]: Registered Authentication Agent for unix-process:28205:127775 (system bus name :1.76 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedes