splunk log file monitoring

SAR is a monitoring command under Linux systemTo install the SAR:Yum Install-y SysstatThe first time you use the SAR command, the following error is reported: "Cannot open/var/log/sa/sa17: There is no file or directory."Here's a value of 171 like the date of the day (I tested on August 17, 2015, so here is 17). This error is caused by not creating the

Today, a test database is down. After the Oracle database is restarted, the listener cannot be started. The lsnrctl start or lsnrctl status Command is stuck in this step: Lsnrctl status LSNRCTL for Linux: Version 10.2.0.5.0-Production on 09-APR-2013 15:14:39 Copyright (c) 1991,201 0, Oracle. All rights reserved. Connecting to (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP) (HOST = dbserver) (PORT = 1521 ))) Then there is no more The pain point is that the listener.

Requirements: monitoring logs, if there is an attack, the IP blacklistAnalysis:1. Open log File2. Take out the IP address3, determine the number of times each IP appears, if more than 50 times, add blacklist4. Read once per minuteLog style:178.210.90.90--[04/jun/2017:03:44:13 +0800]"get/wp-includes/logo_img.php http/1.0"302 161"http://nnzhp.cn/wp-includes/logo_img.php" "mozilla/5.0 (Windows; U Windows NT 5.

find-name '* listener *' command is used to locate the listener. log rm and recreate it. Client Connection successful. The headache is that the lsnrctl status Command is still unavailable, as before, stuck in the previous step. So I checked the/etc/hosts file and found that the IP address here is not the address of the current database. After the inquiry, I learned that the server was moved, the IP address

Recently there is a monitoring project to collect database information, the original plan is to write a SQL script, each script put a query statement and then through the operating system layer SU to the Oracle user through Sqlpus execute this. sql, and then add to crontab timed execution. But this problem has a disadvantage, is to establish a connection too much, if every 5 minutes to collect data that means 5 minutes through the Sqlplus landing data

is stopped connected to the database server, the listening and instance service can start normally, and the client can connect to the database server.5, at this time through the EXP command to the database data backup;6. After launching the app connected to this database, it is found that the connection still cannot be obtained, and the Oracle instance is connected through the client tool again.7, stop the application again, try to restart the Oracle service several times finally started up;8,

The comment format of the shell split analysis log file is as follows :.......................... .. xxx. xxx.10.59 db1059 mynbdpdatadb. idc4. dbname R620 master IDC2 Y Yxxx. xxx.11.59 db1159 mynbdpdatadw. idc4. dbname R620 slave IDC1 Y Yxxx. xxx.10.90 db1090-dbname1, dbname2, dbname3 R620 slave IDC3 Y Yxxx. xxx.11.90 db1190-dbname1, dbname2, dbname3 R620 slave IDC2 Y Yxxx. xxx.10.94 db1094 myuetdb. idc4. d

Tags: rsync+inotify-tools+ssh implement mysql-bin log file real-time backup1, Environment: two CentOS computer direct connection, its server A's IP address is 192.168.1.124, Server B's IP address is 192.168.1.121.2. Requirement Software Installation (SSH system is installed by default):Server A:Yum Install rsync Inotify-toolsServer B:Yum Install rsync3. Set up user (Backup execution user)Build Users: Userad