|
|
系统message日志无故报 systemd: Started Session :
9 _/ t) N# l- y- o( T4 u: i1 BOct 20 09:01:19 controller2 systemd: Started Session 108 of user root." N+ K3 y, \4 Y8 v+ b! [+ [
Oct 20 09:10:01 controller2 systemd: Started Session 110 of user root.
3 d" ^' K* a$ Q: c( \; ?Oct 20 09:12:29 controller2 systemd-logind: New session 111 of user root.: s% ^# C. }. v$ A( S
Oct 20 09:12:29 controller2 systemd: Started Session 111 of user root.! V6 a1 V+ M2 n; ?) P
^C
, x# b! c* v2 d) t[root@controller2 ~]#) @$ y1 Q5 V/ N% M
( t1 ~9 D" V" v5 }# ?( C( Z0 v6 W- ^; p解决办法：添加syslog配置 9 \( b- i: u8 P% w) d
[root@controller2 ~]# echo 'if $programname == "systemd" and ($msg contains "Starting Session" or $msg contains "Started Session" or $msg contains "Created slice" or $msg contains "Starting user-" or $msg contains "Starting User Slice of" or $msg contains "Removed session" or $msg contains "Removed slice User Slice of" or $msg contains "Stopping User Slice of") then stop' >/etc/rsyslog.d/ignore-systemd-session-slice.conf- w- x7 D% @% G" ?" L6 x0 R
[root@controller2 ~]# 2 t I3 q: [. U" C$ ^
[root@controller2 ~]# echo 'if $programname == "systemd" and ($msg contains "Starting Session" or $msg contains "Started Session" or $msg contains "Created slice" or $msg contains "Starting user-" or $msg contains "Starting User Slice of" or $msg contains "Removed session" or $msg contains "Removed slice User Slice of" or $msg contains "Stopping User Slice of") then stop' >/etc/rsyslog.d/ignore-systemd-session-slice.conf ]* p+ }( v K& D! D: y$ Q( O1 U
. O% n6 I/ {$ h" i ~$ S
& i1 V1 i; n1 d' [! P2 z( R
[root@controller2 ~]# tail -f /var/log/messages
3 \9 ?- F; w) [# w7 eOct 20 08:10:01 controller2 systemd: Started Session 102 of user root.
% M/ [3 ~1 |1 T. X* QOct 20 08:20:01 controller2 systemd: Started Session 103 of user root.7 C: B- a+ n7 E
Oct 20 08:30:01 controller2 systemd: Started Session 104 of user root.
: ?6 y1 e& i! c: t1 h/ U" b" KOct 20 08:40:01 controller2 systemd: Started Session 105 of user root.2 O2 ^- j1 N( m1 K2 I: c, L3 O
Oct 20 08:50:01 controller2 systemd: Started Session 106 of user root.
0 ?- y1 \; O1 J* XOct 20 09:00:01 controller2 systemd: Started Session 107 of user root.
1 I3 N2 }, T& q% y5 a% ROct 20 09:01:19 controller2 systemd: Started Session 108 of user root.
% {$ Z& h! p- ]# U4 I& u' P; \Oct 20 09:10:01 controller2 systemd: Started Session 110 of user root.+ |6 X# y4 }8 f
Oct 20 09:12:29 controller2 systemd-logind: New session 111 of user root.
3 o2 N+ D" V: [; V: g6 e1 \Oct 20 09:12:29 controller2 systemd: Started Session 111 of user root.1 a; H" e8 J) Q$ l5 i2 t" S# k
- u$ j( X; f0 g+ U/ I$ i1 ~& L" \6 f- h9 P% j- q$ \7 ^8 X& w t
重启syslog1 B* B9 ^1 G3 t- R
^C" f2 h8 ~1 F r
[root@controller2 ~]# systemctl restart rsyslog* t2 v" p. ~5 k# d/ }
. w" Q# u' G- p' `5 o
+ n% j. Y" I: ?
[root@controller2 ~]# tail -f /var/log/messages
2 y- @; u# g8 K* i6 A( tOct 20 09:01:19 controller2 systemd: Started Session 108 of user root.
! R! d1 j+ j& ^3 p' l7 w4 GOct 20 09:10:01 controller2 systemd: Started Session 110 of user root./ Z2 A% @5 l6 p" Z
Oct 20 09:12:29 controller2 systemd-logind: New session 111 of user root.: w, c( z2 d0 F* d' E b1 U% q
Oct 20 09:12:29 controller2 systemd: Started Session 111 of user root.- W% V# F* a% U; L
Oct 20 09:15:11 controller2 systemd: Stopping System Logging Service...
) f- Q' v+ f5 @, QOct 20 09:15:11 controller2 rsyslogd: [origin software="rsyslogd" swVersion="8.24.0-55.el7" x-pid="1072" x-info="http://www.rsyslog.com"] exiting on signal 15.
. b- v$ R: o9 S2 d& |+ e! x+ BOct 20 09:15:11 controller2 systemd: Stopped System Logging Service.4 \0 \! ~4 v/ F" u4 y4 D8 e
Oct 20 09:15:11 controller2 systemd: Starting System Logging Service...
) ~/ J ]9 @6 j1 ROct 20 09:15:11 controller2 rsyslogd: [origin software="rsyslogd" swVersion="8.24.0-55.el7" x-pid="221370" x-info="http://www.rsyslog.com"] start; X6 O! G. | h+ D0 [& a
Oct 20 09:15:11 controller2 systemd: Started System Logging Service.9 N0 L$ f _! {* ]+ c8 T4 H2 ?6 g4 j3 }
|' x o% {5 K7 D
暂未报错：% u. o3 B* k2 j+ q9 {' w6 _4 C
|
|
发表于 2021-10-20 09:26:09