{"id":723,"date":"2013-08-21T07:25:13","date_gmt":"2013-08-21T07:25:13","guid":{"rendered":"http:\/\/blog.zhukunqian.com\/?p=723"},"modified":"2014-04-16T08:17:49","modified_gmt":"2014-04-16T08:17:49","slug":"log%e6%97%a5%e5%bf%97%e8%bf%9c%e7%a8%8b%e7%bb%9f%e4%b8%80%e8%ae%b0%e5%bd%95","status":"publish","type":"post","link":"http:\/\/blog.zhukunqian.com\/?p=723","title":{"rendered":"log\u65e5\u5fd7\u8fdc\u7a0b\u7edf\u4e00\u8bb0\u5f55"},"content":{"rendered":"

\u4eca\u5929\u7ec8\u4e8e\u89e3\u51b3\u6389\u4e86\u6240\u6709\u9047\u5230\u7684\u95ee\u9898\uff0c\u73b0\u5728\u5c06\u89e3\u51b3\u65b9\u6848\u53ca\u9047\u5230\u7684\u95ee\u9898\u5728\u6b64\u8bb0\u5f55\u4e00\u4e0b\uff0c\u4ee5\u514d\u9057\u5fd8\u3002<\/p>\n

\u8fd9\u6b21\u82b1\u8d39\u4e86\u4e0d\u5c11\u65f6\u95f4\uff0c\u6700\u5927\u7684\u5751\u662fcentos6\u4e2d\u81ea\u5e26\u7684rsyslog\u662f5.x\u7248\u672c\uff0c\u800c\u5b98\u7f51\u4e0a\u65e9\u5df2\u7ecf\u53d1\u5e03\u5230\u4e867.x\u7248\u672c\uff0c\u800c\u6211\u4e00\u76f4\u63097.x\u6587\u6863\u6765\u5b66\u4e60\uff0c\u771f\u662f\u5751\u7239\u554a\u3002<\/p>\n

\u597d\u4e86\uff0c<\/p>\n

\u4e0b\u9762\u662frsyslog\u7684\u914d\u7f6e\u3002<\/p>\n

\u914d\u7f6erepo<\/p>\n

\u5728\/etc\/yum.repos.d\u4e0b\u65b0\u5efa\u6587\u4ef6 rsyslog.repo<\/p>\n

[rsyslog_v7]\r\nname=Adiscon CentOS-$releasever - local packages for $basearch\r\nbaseurl=http:\/\/rpms.adiscon.com\/v7-stable\/epel-$releasever\/$basearch\r\nenabled=1\r\ngpgcheck=0\r\ngpgkey=http:\/\/rpms.adiscon.com\/RPM-GPG-KEY-Adiscon\r\nprotect=1<\/pre>\n
1\u3001\u6253\u5f00udp\uff0c514\u7aef\u53e3<\/p>\n
vi \/etc\/rsyslog.conf<\/p>\n
\u6ce8\u91ca\u6389\u4e0b\u9762\u4e24\u53e5\u524d\u9762\u7684\u2018#\u2019\u53f7<\/p>\n
$ModLoad imudp\r\n$UDPServerRun 514<\/pre>\n
2\u3001\u5728\/etc\/rsysconfig.d\/\u4e0b\u65b0\u5efa\u6587\u4ef6igame.conf<\/p>\n
$EscapeControlCharactersOnReceive off\r\n\r\n$template TraditionalFormat2,"%msg%\\n"\r\n$template TraditionalFormat3,"%syslogtag% %msg%\\n"\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 if re_match($syslogtag,'^moon[0-9]+-[a-zA-Z]+.log$') then {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 $ActionFileDefaultTemplate TraditionalFormat2\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 $template DynFile2,"\/opt\/logs\/router-log\/%syslogtag:R,ERE,1,DFLT:(.*)-.*.log--end%\/%timegenerated:1:10:date-rfc3339%\/%syslogtag:R,ERE,1,DFLT:.*-(.*).log--end%.log"\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 *.* -?DynFile2\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 stop\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 } else {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 if re_match($syslogtag,'^moon[0-9]+$') then {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 $ActionFileDefaultTemplate TraditionalFormat3\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 $template DynFile3,"\/opt\/logs\/router-log\/moon-alert.log"\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 *.* -?DynFile3\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 stop\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 }\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 }<\/pre>\n
 <\/p>\n
$EscapeControlCharactersOnReceive off<\/pre>\n
\u8fd9\u53e5\u7528\u6765\u907f\u514dlog\u4e2d\u7684’\\t’\u88ab\u5f53\u505a\u63a7\u5236\u547d\u4ee4\u88ab\u8f6c\u6362\u4e3a#011<\/p>\n
logback\u4e2d\u7684\u914d\u7f6e<\/p>\n
\t<appender name="journal" class="ch.qos.logback.classic.net.SyslogAppender">\r\n\t\t<syslogHost>${logback.syslogHost}<\/syslogHost>\r\n\t\t<port>${logback.syslogPort}<\/port>\r\n\t\t<facility>LOCAL7<\/facility>\r\n\t\t<suffixPattern>${MODULE}-journal.log %date [%thread] %logger{0}\\(%L\\) %p %msg\r\n\t\t<\/suffixPattern>\r\n\t<\/appender><\/pre>\n","protected":false},"excerpt":{"rendered":"
\u4eca\u5929\u7ec8\u4e8e\u89e3\u51b3\u6389\u4e86\u6240\u6709\u9047\u5230\u7684\u95ee\u9898\uff0c\u73b0\u5728\u5c06\u89e3\u51b3\u65b9\u6848\u53ca\u9047\u5230\u7684\u95ee\u9898\u5728\u6b64\u8bb0\u5f55\u4e00\u4e0b\uff0c\u4ee5\u514d\u9057\u5fd8 …<\/p>\n
\u7ee7\u7eed\u9605\u8bfb »<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[24],"tags":[],"_links":{"self":[{"href":"http:\/\/blog.zhukunqian.com\/index.php?rest_route=\/wp\/v2\/posts\/723"}],"collection":[{"href":"http:\/\/blog.zhukunqian.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/blog.zhukunqian.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/blog.zhukunqian.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/blog.zhukunqian.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=723"}],"version-history":[{"count":6,"href":"http:\/\/blog.zhukunqian.com\/index.php?rest_route=\/wp\/v2\/posts\/723\/revisions"}],"predecessor-version":[{"id":892,"href":"http:\/\/blog.zhukunqian.com\/index.php?rest_route=\/wp\/v2\/posts\/723\/revisions\/892"}],"wp:attachment":[{"href":"http:\/\/blog.zhukunqian.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=723"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/blog.zhukunqian.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=723"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/blog.zhukunqian.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=723"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}