LINUX7(鏃ュ織绠＄悊)

Posted 2020-12-11

鏍囩锛?a href='http://www.mamicode.com/so/1/%e5%90%af%e5%8a%a8' title='鍚姩'>鍚姩   瀹曟満   message   lse   log   娓呴櫎   浠婂ぉ   emd   缁存姢   

• 绯荤粺鏃ュ織鏂囦欢

rsyslog涓昏鏄敤鏉ユ敹闆嗙郴缁熶骇鐢熺殑鍚勭鏃ュ織锛屾棩蹇楁枃浠堕粯璁ゆ斁鍦?var/log鐩綍涓嬨€?/p>

• 甯哥敤鏃ュ織

/var/log/boot.log	瀛樺偍鏈嶅姟鍚姩涓庡仠姝俊鎭?/td>
/var/log/dmesg	瀛樺偍绯荤粺鍚姩鏃舵樉绀哄湪灞忓箷鐨勫唴鏍镐俊鎭紝鍖呭惈浜嗙郴缁熶腑纭欢鐘舵€佺殑妫€鏌ヤ俊鎭€?/td>
/var/log/messages銆€	鎻愪緵澶у鏁版棩蹇椾俊鎭?/td>
/var/log/secure	瀛樺偍涓庣郴缁熷畨鍏ㄦ湁鍏崇殑淇℃伅
/var/log/lastlog	淇濆瓨姣忎釜鐢ㄦ埛鐨勬渶鍚庝竴娆＄櫥闄嗕俊鎭?/td>
/var/log/wtmp	浜岃繘鍒舵枃浠讹紝淇濆瓨鎵€鏈夌敤鎴风殑鐧婚檰銆侀€€鍑恒€佺郴缁熷惎鍔ㄣ€侀噸鍚€佸畷鏈虹瓑璁板綍
/var/log/btmp	淇濆瓨鐢ㄦ埛鐧婚檰鏃剁櫧鐨勬棩蹇楁枃浠?/td>

鏃ュ織鏂囦欢鐢眗syslog鏈嶅姟缁存姢銆?var/log鐩綍涓寘鍚悇绉嶇壒瀹氫簬鏌愪簺鏈嶅姟鐨勬棩蹇楁枃浠躲€?/p>

• 閰嶇疆绯荤粺鏃ュ織

• 浼樺厛绾?priority)

璁稿绋嬪簭浣跨敤sysog鍗忚灏嗘椂闂磋褰曞埌绯荤粺姣忎竴鏃ュ織娑堟伅鏍规嵁璁惧(娑堟伅鐨勭被鍨?鍜屼紭鍏堢骇銆?/p>

淇℃伅鏉ユ簮	浼樺厛绾?/td>	璇存槑
debug	7	璋冭瘯鎺掗敊淇℃伅锛屼粎瀵圭▼搴忓紑鍙戜汉鍛樻湁鐢?/td>
info	6	涓€鑸俊鎭紝鍙互蹇界暐
notice	5	姝ｅ父鎻愮ず淇℃伅
warn	4	鍙兘鏄湁闂鐨勮鍛婁俊鎭?/td>
err	3	涓€鑸殑閿欒淇℃伅
crit	2	鍏抽敭鐘舵€佷俊鎭?/td>
alert	1	闇€鐗瑰埆娉ㄦ剰鐨勮鍛婁俊鎭紝涓€鑸杩呴€熸洿姝?/td>
emerg	0	鏈€瑕佸仛锛岀揣鎬ョ姸鎬侊紝涓€鑸槸绯荤粺涓嶅彲鐢?/td>

• 鏃ュ織閰嶇疆鏂囦欢绀轰緥

鍦?etc/rsyslog.conf涓坊鍔犱竴鏉¤褰曘€傚皢鎵€鏈塱nfo浼樺厛绾х殑鏃ュ織璁板綍璁板綍鍒?var/log/log_test.log涓€?/p>

*.info        /var/log/log_test.log

娉ㄦ剰锛氫慨鏀归厤缃悗锛岄噸鍚痳syslog鏈嶅姟

systemctl restart rsyslog.service

•  鏌ョ湅鏃ュ織

• 鎵嬪姩鍙戦€乻yslog娑堟伅

浣跨敤logger鍛戒护鍙互鍙戦€佹秷鎭埌rsyslog鏈嶅姟銆傝嫢瑕佸悜rsyslog鏈嶅姟鍙戦€佹秷鎭苟璁板綍鍒版棩蹇楁枃浠朵腑锛屽彲浠ユ墽琛屼笅闈㈣繖涓懡浠わ細

logger -p user.info "hello"

•  浣跨敤tail鍛戒护鏌ヨ鏈€鏂扮殑鏃ュ織璁板綍

tail -f /var/log/log_test.log

 

•  鏃ュ織鏂囦欢杞浆

• 鐢ㄦ棩蹇楄疆杞湇鍔ogrotate鏉ヨ嚜鍔ㄥ疄鐜版棩蹇楁枃浠剁殑瀹氭湡娓呯悊銆?/li>

鍦?etc/cron.daily鐩綍涓湁涓€涓悕涓簂ogrotate鐨勮剼鏈枃浠剁敤鏉ュ惎鍔╨ogrotate绋嬪簭銆俢ron浣滀笟姣忔棩杩愯涓€娆ogrotate绋嬪簭锛屼互鏌ョ湅鏄惁鏈変换浣曟棩蹇楅渶瑕佽疆杞€傝疆杞厤缃枃浠朵负/etc/logrotate.conf鐨勯粯璁ら厤缃?/p>

vi /etc/logrotate.conf

•  鏌ョ湅systemd鏃ュ織鏉＄洰

• 鏄剧ず鏈€鏂扮殑10涓棩蹇楁潯鐩?/li>

journalctl -n 10

•  瀹炴柦婊氬姩鏄剧ず鏈€鏂版棩蹇?鏈€鏂扮殑10鏉?

journalctl -f

•  浣跨敤閫夐」-p鎸囧畾鏃ュ織杩囨护绾у埆

journalctl -p err

•  鍙煡鐪嬪唴鏍告棩蹇?涓嶆樉绀哄簲鐢ㄦ棩蹇?

journalctl -k

•  鏌ヨ涓巗ystemd鍗曞厓鏂囦欢sshd.service鍚姩鐩稿叧鐨勬棩蹇楁潯鐩?/li>

journalctl _SYSTEMD_UNIT="sshd.service"

•  鏄剧ず浠婂ぉ鐨勬棩蹇楁潯鐩?/li>

journalctl --since today

•  鏌ョ湅鎸囧畾鏃堕棿娈电殑鏃ュ織鏉＄洰

journalctl --since "2020-06-21 10:00:00" --until "2020-06-21 13:00:00"

 

•  淇濆瓨systemd鏃ュ織

榛樿鎯呭喌涓嬶紝绯荤粺鏃ュ織淇濆瓨鍦?run/log/journal鐩綍涓紝杩欐剰鍛崇潃绯荤粺閲嶅惎鏃惰繖浜涙棩蹇椾細琚竻闄ゃ€傚彲浠ュ湪/etc/systemd/journald.conf鏂囦欢涓洿鏀箂ystemd-journald鏈嶅姟鐨勯厤缃紝浣挎棩蹇楃郴缁熷湪閲嶅惎鍚庝繚鐣欎笅鏉ャ€?/p>

/etc/systemd/journald.conf鏂囦欢涓殑storage鍙傛暟鍐冲畾绯荤粺鏃ュ織浠ユ槗澶辨€ф柟寮忓瓨鍌紝杩樻槸鍦ㄧ郴缁熼噸鍚悗鎸佷箙淇濈暀銆傛寜鐓у涓嬫墍绀猴紝灏嗚鍙傛暟璁句负persistent銆乿olatile鎴朼uto

鍙傛暟	璇存槑
persistent	灏嗘棩蹇楀瓨鍌ㄥ湪/var/log/journal鐩綍涓紝杩欏彲鍦ㄧ郴缁熼噸鍚悗鎸佷箙淇濈暀銆?br />濡傛灉/var/log/journal鐩綍涓嶅瓨鍦紝systemd-journald鏈嶅姟浼氬垱寤哄畠銆?/td>
volatile	灏嗘棩蹇楀瓨鍌ㄥ湪鏄撳け鎬?run/log/journal鐩綍涓€?br />鍥犱负/run鏂囦欢绯荤粺鏄复鏃剁殑锛屼粎瀛樺湪浜庤繍琛屾椂鍐呭瓨涓紝瀛樺偍鍦ㄥ叾涓殑鏁版嵁锛堝寘鎷郴缁熸棩蹇楋級涓嶄細鍦ㄧ郴缁熷惎鍚庢寔涔呬繚鐣欍€?/td>
auto	rsyslog鍐冲畾瑕佷娇鐢ㄦ寔涔呭瓨鍌ㄨ繕鏄槗澶辨€у瓨鍌ㄣ€傚鏋?var/log/journal鐩綍瀛樺湪锛岄偅涔坮syslog浼氫娇鐢ㄦ寔涔呭瓨鍌紝鍚﹀垯浣跨敤鏄撳鏋滄湭璁剧疆 Storage鍙傛暟锛屾涓洪粯璁ゆ搷浣溿€傚け鎬у瓨鍌ㄣ€?/td>

 

• 鏃跺尯璁剧疆

timedatectl鍛戒护绠€瑕佹樉绀哄綋鍓嶇殑鏃堕棿鐩稿叧绯荤粺璁剧疆锛屽绯荤粺鐨勫綋鍓嶆椂闂淬€佹椂鍖哄拰NTP鍚屾璁剧疆銆?/p>

• 鏌ヨ褰撳墠鏃跺尯鐘舵€?/li>

timedatectl status

• 鏄剧ず鏃跺尯搴?/li>

timedatectl list-timezones

• 鏇存敼褰撳墠鏃跺尯涓轰腑鍥戒笂娴?/li>

timedatectl set-timezone "Asia/Shanghai"

• 涓嶈嚜鍔ㄥ悓姝ユ椂闂?/li>

timedatectl set-ntp false

•  鑷姩鍚屾鏃堕棿

timedatectl set-ntp true