Rhel5 and centos 5.5 x86_64 are all tested.
In the production environment, there is a log server dedicated to recording the log information of other servers is a good idea, but with the Red Hat built-in syslog, the configuration is simple, however, there is no way to separate logs. By default, logs are all heap in the/var/log/message file, which is used to create a log
Update History
April 25, 2014-draft written
Introduction
After the automated deployment of AutoYast and automated monitoring of BMC Patrol have taken shape, log collection, management, and analysis have become a problem we need to consider. Combined with the characteristics of our own business system platform, most systems are based on sles_11_sp1 or sp2. After comparing rsyslog and syslog-ng,
Logging//Defines the listener port source s_remote {TCP (IP (0.0.0.0) port (514)); UDP (IP (0.0.0.0) port (514));
}; Defines the format, location, and permissions that the client log saves on the server destination r_console {file ("/var/log/syslog-ng/$YEAR $month$day/$HOST/console" owner ("
Root ") Group (" Root ") perm (0640) dir_perm (0750) create_dirs (y
Environment:Log Collection server: syslog-ng_v3.3.7Tomcat client: Syslog + TomcatInterference:1. Shut down the firewall and selinux for ease of debugging.#service iptables Stop//stop firewall #chkconfig iptables off//boot does not start #service iptables status//view firewall statusThe firewall has stopped running.650) this.width=650; "src=" http://s4.51cto.com/w
) $InputFilePersistStateInterval 1# Active read, you can set up multiple sets of log reads, set this parameter at the end of each group. To take effect. $InputRunFileMonitor # When submitting logs to a different server, specify the server Ip:port here separately, #如都提交在同一服务器只需在rsyslog. conf specify one time to #local5.*@ @192.168.1.251:514##tomcat Localhost.log Path, modified according to the actual situati
Syslog-ng is installed to manage server logs in a unified manner. The installation method is found online. Some problems need to be solved now;
1. The log server can synchronize the log files on a daily basis, but the log files you want cannot be synchronized to the server b
How to Use syslog-ng to collect logs from a remote Linux machine
If your data centers are all Linux servers, you are the system administrator. One of your tasks is to view the server's log files. However, if you view log files on a large number of machines, You need to log in to the machine one by one to read the log files. If you manage a large number of machines, it will take you a day to work.
In additio
Tag: Host and priority definition establish record collection kernel www.Syslog is the default log daemon for Linux systems, and the default syslog configuration file is the/etc/syslog.conf file. The syslog daemon is configurable, which allows people to specify exactly a place of storage for each type of system information. Compared to syslog,
I. Overview
Syslog-ng is installed on both servers, one server and one client;
Server: 192.168.209.19
Client: 192.168.209.18
Ii. Installation
Run the following command to install Yum:
Yum-y install syslog-ng
After completion, rest
will not be removed.
This path still does not work, because after the MSG is split, the UDP transmission cannot ensure the order and integrity of the message, and the message is not completely sent to syslog in the order you split it. Therefore, the message cannot be restored. It is hard to ensure that the sequence ID is added.
2. I try my best to find a solution that supports more than 1024 message lengths. At the beginning, my test environment wa
There are times when you need to use a bastion machine, but know that the user has used those commands.The name of the Rsyslog property that begins with $ is a variable obtained from the local system, and does not take a variable from the messageFirst, configure the system variables to record the SSH command, and generate files, location/var/log/ssh.log.#vi/etc/profile.d/ssh.sh//Create a file ssh.sh script to store variablesExport History_file=/var/log/ssh.logexport prompt_command= ' {date ' +%y
3.6. Filters
Filters perform log routing within syslog-NG: a message passes the filter if the filter expression is true for the specified message. if a log statement between des filters, the messages are sent to the destinations only if they pass all filters of the Log Path. for example, a filter can select only the messages originating from a participant host. complex filters can be created using filter f
space limit (use as much as possible)
#$ActionQueueSaveOnShutdown on # save messages to disk on shutdown
#$ActionQueueType LinkedList # run asynchronously
#$ActionResumeRetryCount -1 # infinite retries if host is down
# remote host is: name/ip:port, e.g. 192.168.0.1:514, port optional
#*.* @@remote-host:514
# ### end of the forwarding rule ###
#日志 If non-local storage, you need to specify the remote collection log server IP: Port
*.* :ommysql:192.16
Turn from: http://blog.c1gstudio.com/archives/1765
Logstash + Elasticsearch + kibana+redis+syslog-ng
Elasticsearch is an open source, distributed, restful search engine built on Lucene. Designed for cloud computing, to achieve real-time search, stable, reliable, fast, easy to install and use. Supports the use of JSON for data indexing over HTTP.
Logstash is a platform for application log, event transmission
Tags: reference local type command ogg SWA Tor interface LinFirst, the configuration commands are logged to the syslog:Under/ETC/BASHRC of the client, add:Logger-p local3.info \ "' Who am I ' ======================================= is login \"Export prompt_command= ' {msg=$ (History 1 | {read x y; echo $y;}); Logger-p Local3.info \[$ (Who am I) \]\# \ "${msg}" \ "; }‘Logger command:For the Syslog Shell Interface command, there are some parameters that
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.