securemail

. *.info;mail.none;authpriv.none;cron.none/var/log/messagesauthpriv.* /var/log/securemail.*-/var/log/maillogcron.* /var/log/cron*.emerg:omusrmsg:*uucp,news.cri T /var/log/spoolerlocal7.*/var/log/ boot.loglocal0.*/etc/keepalived/keepalived.log2, restart the client Rsyslog service[[emailprotected] log]# systemctl restart

command) $ModLoad imjournal # PR Ovides access to the SYSTEMD journal$modload Immark # provides--mark--message capability$modload Imudp$udpserverrun 514 $ModLoad imtcp$inputtcpserverrun 514$workdirectory/var/lib/rsyslog$allowedsender TCP, 192.168.30.0/24$ Actionfiledefaulttemplate rsyslog_traditionalfileformat$template Remote, "/data/log/%fromhost-ip%/%fromhost-ip%_% $YEAR%-% $MONTH%-% $DAY%.log ": Fromhost-ip,!isequal," 127.0.0.1 "? Remote$includeconfig/etc/rsyslog.d/*.conf$omitlocallogging On

imjournal # provides access to the SYSTEMD journal$modload IMM Ark # provides--mark--message capability$modload Imudp$udpserverrun514$ModLoad Imtcp$inputtcpserverrun514$WorkDirectory/var/lib/Rsyslog$allowedsender TCP,192.168.30.0/ -$ActionFileDefaultTemplate rsyslog_traditionalfileformat$template Remote,"/data/log/%fromhost-ip%/%fromhost-ip%_% $YEAR%-% $MONTH%-% $DAY%.log": Fromhost-ip,!isequal,"127.0.0.1"?Remote$includeconfig/etc/rsyslog.d/*. conf$omitlocallogging On$imjournalstatefile imjourn

Rsyslog + mysql + loganalyzer build a log server The general idea is as follows: Use the rsyslog service that comes with Linux as the underlying layer, and then use the templates of mysql and rsyslog to store files and display them on the web. [Root @ localhost ~] # Grep-v '^ #'/etc/rsyslog. conf | grep-v '^ $' $ ModLoad ommysql *. *: ommysql: localhost, Syslog, rsyslog, 123456 $ ModLoad imuxsock # provides support for local system logging (e.g. via logger command) $ ModLoad imklog # provides k

;mail.none;authpriv.none;cron.none /var/log/messagesauthpriv.* /var/log/securemail.* /var/log/maillogcron.* /var/log/cron*.emerg :omusrmsg:*uucp,news.crit /var/log/spoolerlocal7.*

RsyslogThe service for logging in Linux systems, called Rsyslog, is an enhanced version of the early Syslog service, which is automatically installed and started by default.1. Start the service[[Email protected] log]# service Rsyslog start2. Configuration files[Email protected] log]# more/etc/rsyslog.confBasic format:Facility.prioritylog_location[Email protected] log]# more/etc/rsyslog.conf |grep-v ^# |grep-v ^$$ModLoad imuxsock.so# provides support for local system logging (e.g. via Logger comm

: password2: username2: unit2: 20User3: password3: username3: unit3: 30 Now let's create an awk script, which was previously performed on the command line. In fact, all operations can be implemented on the command line, and we have begun to use the most frequently used batch add users! Script1.awk #! /Bin/awk-F # When the file has executable permissions, you can directly execute#./Script1.awk example2.txt# If this line does not exist, an error may occur, or# Awk-F script1.awk example2.txt parame

information in/var/log/securemail. *-/var/log/maillog ##### store all mail Information in/var/log/maillog. Here there is a-symbol, indicating that it is recorded in asynchronous mode, because the log is usually large cr On. */var/log/cron #### information about scheduled tasks is stored in/var/log/cron *. emerg * (* indicates all users) ### record all information greater than or equal to the emerg level, and send it to every user logged on to the sys

Rsyslog By default can only transfer the system log, such as Dhcp,cron, now to send a service log to the remote Rsyslog server, how to do it?Workaround: To use the Rsyslog imfile module.Reference official url:http://www.rsyslog.com/doc/v8-stable/configuration/modules/imfile.htmlReference online URL:HTTP://WWW.TUICOOL.COM/ARTICLES/JV2EUVNRsyslog configuration file (the content of the comment is filtered out):[Email protected] ~]# cat/etc/rsyslog.conf | Egrep-v "#|^$"$ActionFileDefaultTemplate Rsy

# $ModLoad immark #immark是模块名, log tagging # $ModLoad imudp #imupd是模块名, support UDP protocol # $UDPServerRun 514# Allow 514 ports to receive logs forwarded over UDP and TCP protocols # $ModLoad imtcp #imtcp是模块名, support TCP protocol #$ inputtcpserverrun514#################globaldirectives################ #定义全局日志格式的指令 $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat #定义日志格式默认模板 $IncludeConfig /etc/rsyslog.d/*.conf all files ending with conf in #载入rsyslog. d file ####RULES####*.info;