Ubuntu 14.04.6无常规系统日志message日志

admin

Ubuntu 14.04.6无常规系统日志message日志
+ d( A4 ~* [- {5 n7 }! m! Broot@controller:~# cd /var/log/
3 Q2 [. T6 j; y" {- lroot@controller:/var/log# ls
* n7 h- r9 e  G1 @' ~alternatives.log  boot.log       chrony        dmesg.0     dmesg.3.gz  faillog    kern.log   syslog                unattended-upgrades
apt               bootstrap.log  dist-upgrade  dmesg.1.gz  dmesg.4.gz  fsck       landscape  ubuntu-advantage.log  upstart
auth.log          btmp           dmesg         dmesg.2.gz  dpkg.log    installer  lastlog    udev                  wtmp

6 [; L; D3 a$ X7 e, m5 v  m默认没有系统日志，和centos系统还是有些区别。
1 Z. R- _' v+ k0 K# B/ a* P. E通过网页搜索，显示ubuntu系统默认不开启系统日志。
因为在 /etc/rsyslog.d/50-default.conf 文件中，将其注释掉了
cat /etc/rsyslog.d/50-default.conf
#  Default rules for rsyslog.
#
% `5 N* I1 r' n+ R#   For more information see rsyslog.conf(5) and /etc/rsyslog.conf
#
# First some standard log files.  Log by facility.
#
auth,authpriv.*   /var/log/auth.log
  J: d3 s% M7 f5 C*.*;auth,authpriv.none  -/var/log/syslog
/ b7 \2 S6 K/ V) @& l; n#cron.*    /var/log/cron.log
' m, `# L& A% R/ Y- i3 L#daemon.*   -/var/log/daemon.log
kern.*    -/var/log/kern.log
3 E  K* ~: C- u2 g5 Y/ `#lpr.*    -/var/log/lpr.log
3 u! O: U" L& j% {' O1 zmail.*    -/var/log/mail.log
) h& b/ w: d  g8 P7 f- M. y#user.*    -/var/log/user.log
#
# Logging for the mail system.  Split it up so that
1 G% |+ `4 `4 F. }! b, j2 t' H# it is easy to write scripts to parse these files.
#
, k% G- N) I3 G, y/ t6 @#mail.info   -/var/log/mail.info
' \7 K) \9 c& p7 {3 ?#mail.warn   -/var/log/mail.warn
" @5 K, H' `" }; T  L% cmail.err   /var/log/mail.err
#
" q9 J4 V+ ~* i/ b+ [4 E5 `# Logging for INN news system.
; o4 f' P" I# h7 p9 N#
news.crit   /var/log/news/news.crit
7 z+ i  Q9 l: qnews.err   /var/log/news/news.err
) n2 m0 q4 O2 Q. R7 ?& y- U7 fnews.notice   -/var/log/news/news.notice
0 e) L4 u/ j5 }+ z  M#
0 Z5 x8 v( Q' r8 A' w# Some "catch-all" log files.
#
7 }8 u) ?) W1 F* r6 u4 e#*.=debug;\
4 O1 G- E0 i8 f: n# auth,authpriv.none;\
# news.none;mail.none -/var/log/debug
#*.=info;*.=notice;*.=warn;\
5 G+ m! S/ V( Z) C! D8 b# [" ^- d# auth,authpriv.none;\
# cron,daemon.none;\
# mail,news.none  -/var/log/messages
#
# Emergencies are sent to everybody logged in.
#
4 x- ^" {5 x, p/ G( _7 z9 ?/ K*.emerg                                :omusrmsg:*
#
# I like to have messages displayed on the console, but only on a virtual
# console I usually leave idle.
#
, M3 |) w* d0 O, Y  E7 l#daemon,mail.*;\
# news.=crit;news.=err;news.=notice;\
/ _/ Z# Y, z2 V/ B: H5 C# *.=debug;*.=info;\
# *.=notice;*.=warn /dev/tty8
  V5 H) _5 Z1 g+ X# The named pipe /dev/xconsole is for the `xconsole' utility.  To use it,
! r' z2 I6 C% Y- w5 W8 B# you must invoke `xconsole' with the `-file' option:
#
#    $ xconsole -file /dev/xconsole [...]
$ K+ V5 O# g' A* c: X#
# NOTE: adjust the list below, or you'll go crazy if you have a reasonably
#      busy site..
#
, @3 @6 v, F/ p' `daemon.*;mail.*;\
news.err;\
- ~9 S% W0 x- ]! W- Y# U *.=debug;*.=info;\
' r& `3 E$ v* g& U1 @ *.=notice;*.=warn |/dev/xconsole
解决办法：
' ]+ S& Q- O/ C9 T所以需修改该配置文件，将注释放开。
# }3 K9 r0 t. ^! }9 Zroot@controller:/var/log# vim /etc/rsyslog.d/50-default.conf

# Some "catch-all" log files.
+ {" r$ L5 P3 v: E" {9 T9 m; c#
/ e& y# ]$ ]3 e$ ?+ W*.=debug;\
9 b5 C, J' _& u* r9 I        auth,authpriv.none;\
        news.none;mail.none     -/var/log/debug
*.=info;*.=notice;*.=warn;\
        auth,authpriv.none;\
        cron,daemon.none;\
- O" L) _, v2 F- P9 t        mail,news.none          -/var/log/messages
# }1 s, g, i0 c: H- V$ Q- a  K
/ h# s- n1 g5 i: J; u' G) E然后重启rsyslog服务即可：
8 C  W+ |! g# }+ E& A+ y
4 V9 t- G: H' u6 k7 l; Vroot@controller:/var/log# service rsyslog restart
rsyslog stop/waiting
rsyslog start/running, process 74907


3 R; C) z: T2 A$ l1 w再次查看，就有日志了：
2 n5 j5 C  T& o4 A9 }$ croot@controller:/var/log# ls
alternatives.log  boot.log       chrony        dmesg.0     dmesg.3.gz  faillog    kern.log   messages              udev                 wtmp
" q" H5 m6 X7 {apt               bootstrap.log  dist-upgrade  dmesg.1.gz  dmesg.4.gz  fsck       landscape  syslog                unattended-upgrades
auth.log          btmp           dmesg         dmesg.2.gz  dpkg.log    installer  lastlog    ubuntu-advantage.log  upstart
: |7 k9 n# G  q+ I) droot@controller:/var/log#
4 P: D% F8 Q6 [( p, _

, Q) g! z& }  ~# a; D% o问题解决。
; P" L6 U8 s$ W0 o7 n