大佬教程收集整理的这篇文章主要介绍了linux – rsyslog不会将远程消息写入特定主机的日志文件,大佬教程大佬觉得挺不错的,现在分享给大家,也给大家做个参考。
rsyslog.conf如下:
# rsyslog v5 configuration file # For more information see /usr/share/doc/rsyslog-*/rsyslog_conf.html # If you experience problems,see http://www.rsyslog.com/doc/troubleshoot.html ### MODULES #### $ModLoad imuxsock # provides support for local system logging (e.g. via logger command) $ModLoad imklog # provides kernel logging support (prevIoUsly done by rklogd) # Provides UDP syslog reception $ModLoad imudp $UDPServerRun 514 #### GLOBAL DIRECTIVES #### # Use default timestamp format $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat # Include all config files in /etc/rsyslog.d/ $IncludeConfig /etc/rsyslog.d/*.conf # Log all kernel messages to the console. # Logging much else clutters up the screen. #kern.* /dev/console # Log anything (except mail) of level info or higher. # Don't log private authentication messages! *.info;mail.none;authpriv.none;cron.none /var/log/messages # The authpriv file has reStricted access. authpriv.* /var/log/secure # Log all the mail messages in one place. mail.* -/var/log/maillog # Log cron stuff cron.* /var/log/cron # Everybody gets emergency messages *.emerg * # Save news errors of level crit and higher in a special file. uucp,news.crit /var/log/spooler # Save boot messages also to boot.log local7.* /var/log/boot.log
配置文件如下:
##RSYSLOG configuration file for Remote Logs $FileCreateMode 0640 $template PerHostLog,"/var/log/remote/%HOSTNAME%.log" if ($fromhost-ip startswith '10.1.5' or $fromhost-ip startswith '10.2.8') then -?PerHostLog & ~
这些规则有什么问题吗?
TCPdump显示来自10.2.8.1主机的消息到达服务器,但syslog选择忽略它们.为什么??
以上是大佬教程为你收集整理的linux – rsyslog不会将远程消息写入特定主机的日志文件全部内容,希望文章能够帮你解决linux – rsyslog不会将远程消息写入特定主机的日志文件所遇到的程序开发问题。
如果觉得大佬教程网站内容还不错,欢迎将大佬教程推荐给程序员好友。
本图文内容来源于网友网络收集整理提供,作为学习参考使用,版权属于原作者。
如您有任何意见或建议可联系处理。小编QQ:384754419,请注明来意。