找回密码
 注册
查看: 1434|回复: 0

Ubuntu 14.04.6无常规系统日志message日志

[复制链接]

1

主题

0

回帖

12

积分

管理员

积分
12
QQ
发表于 2022-1-18 15:00:01 | 显示全部楼层 |阅读模式
Ubuntu 14.04.6无常规系统日志message日志
8 v  f$ r# G8 a4 X: P5 V1 iroot@controller:~# cd /var/log/
; E$ q# V3 J" yroot@controller:/var/log# ls
) U3 x1 f0 {6 O, Y: salternatives.log  boot.log       chrony        dmesg.0     dmesg.3.gz  faillog    kern.log   syslog                unattended-upgrades+ j5 X: s  p9 z5 y
apt               bootstrap.log  dist-upgrade  dmesg.1.gz  dmesg.4.gz  fsck       landscape  ubuntu-advantage.log  upstart
4 |& ?. w/ p6 @0 w4 ?auth.log          btmp           dmesg         dmesg.2.gz  dpkg.log    installer  lastlog    udev                  wtmp
8 \( X. Z5 `0 p# n* _- G. s, B. z; F9 ^
默认没有系统日志,和centos系统还是有些区别。& B4 D. K$ r9 C& }) n4 M4 J
通过网页搜索,显示ubuntu系统默认不开启系统日志。- R' o$ U+ A8 J: Y
因为在 /etc/rsyslog.d/50-default.conf 文件中,将其注释掉了
7 m, I5 A" x( l8 h5 Wcat /etc/rsyslog.d/50-default.conf
/ z! x" Z) s: ]% m: q0 K% S* C#  Default rules for rsyslog.
2 c$ y% v+ s+ }! r#
& p4 x: C+ _$ Y: R- v3 w9 w% T4 E#   For more information see rsyslog.conf(5) and /etc/rsyslog.conf
0 F8 u: B0 y2 N* [
#
0 X  Y- F) X; s# First some standard log files.  Log by facility.
6 _" |) \9 |2 a2 G#" a( A: @6 K) u  f4 |; Z
auth,authpriv.*   /var/log/auth.log6 A) f. |, {  R6 c* l: B
*.*;auth,authpriv.none  -/var/log/syslog/ _  F; Q9 q$ S: T
#cron.*    /var/log/cron.log% j9 e4 L; i0 d; L1 ~
#daemon.*   -/var/log/daemon.log
' Q; v5 i/ l. T4 ]* Q9 F1 K2 Akern.*    -/var/log/kern.log  \: ^7 e, P$ }! K5 e
#lpr.*    -/var/log/lpr.log2 ~- V4 Z, c  d- ~6 C& R
mail.*    -/var/log/mail.log
2 C4 w- E6 D, I$ v  `#user.*    -/var/log/user.log

& U4 q8 a  J$ W5 c2 G9 t# O# {3 y4 L! R+ a#
% I. j# l3 q& u6 w% u9 _- e# Logging for the mail system.  Split it up so that
! a5 @+ `" Y* M1 V* v. Q5 r- O# it is easy to write scripts to parse these files.
2 u( h$ l  v, E% |* l#3 c( @8 j3 f1 e+ a1 S
#mail.info   -/var/log/mail.info0 G/ I7 q& M. f# ?+ P* d+ ?# u
#mail.warn   -/var/log/mail.warn
- r# f" p6 ?$ H. K' I0 J( j2 jmail.err   /var/log/mail.err
8 Q& w! V, J% l8 C7 l1 Q
#
3 g5 w% H1 f, Q1 _9 `  v# Logging for INN news system.3 x: e! V0 {  N( t1 V; m8 I
#" w9 W- G! H% ?
news.crit   /var/log/news/news.crit
# ^' L. A5 A  knews.err   /var/log/news/news.err2 U5 j# P0 h, Z5 q3 v
news.notice   -/var/log/news/news.notice
/ x2 ^& ]7 N! u; K8 _& ]
#: O2 Y; j$ r- a9 M% r* U6 k/ Y
# Some "catch-all" log files.
( Q* A. j1 i4 V" ~# M8 I#
9 U' t6 {& E- |$ q#*.=debug;\
9 P0 Q5 d2 ?( ~9 \4 M3 M5 t1 z# auth,authpriv.none;\. y" T; I; D3 O. P* M
# news.none;mail.none -/var/log/debug
5 H4 J% ]" i) D2 h- q; |#*.=info;*.=notice;*.=warn;\; C5 j1 d% a) [& f* H
# auth,authpriv.none;\! k/ [5 o- u) J) x. Q( q; i* ~
# cron,daemon.none;\2 k* x% ?0 w/ z/ q( v( Z2 y
# mail,news.none  -/var/log/messages

9 W* A" F2 V5 E# s#5 A- V3 D2 N' c( X9 v
# Emergencies are sent to everybody logged in.
, _# T1 g2 a& a7 o2 v$ ~; [. g#/ Q2 \3 T7 D& l/ z+ }7 P, C
*.emerg                                :omusrmsg:*

9 f9 k. R$ U/ k- e" p. F4 n: |& b#9 d1 E& I$ k3 Q1 y6 M! W! \
# I like to have messages displayed on the console, but only on a virtual
$ L% Z  s4 ~- w# console I usually leave idle.
2 y/ b: g: l  n  r#7 L+ M9 w! u3 e" O/ u  {8 K$ x) @6 S
#daemon,mail.*;\: `7 e( [+ P3 M7 I) B$ W
# news.=crit;news.=err;news.=notice;\
: {$ X7 [# g) w3 g& l. `# r5 k& O# *.=debug;*.=info;\; Q6 |+ q7 T8 S; ?7 x- k! M
# *.=notice;*.=warn /dev/tty8
$ x8 [3 m: v- K7 ?& e8 I
# The named pipe /dev/xconsole is for the `xconsole' utility.  To use it,0 v) k! B7 N5 n) \6 Y. U1 G
# you must invoke `xconsole' with the `-file' option:
: q( b' e# q& b  }: Q$ F+ b& j#
. ]4 ~  ^% E' ^; C! T& o+ i/ a#    $ xconsole -file /dev/xconsole [...]  T& P# X$ h: v1 R; x' b( @7 L
#8 T; `6 L0 a7 {( U& \& A
# NOTE: adjust the list below, or you'll go crazy if you have a reasonably3 B- I3 h2 V* Q  E  B4 `. B
#      busy site..
, Q' j3 _- W: i; T8 B#
. D9 G8 z( L2 `  xdaemon.*;mail.*;\
. N4 l  s. Y' W9 n news.err;\
# X& d1 i. G5 P- J *.=debug;*.=info;\
6 i) J: k! {* [9 v0 J. w( R *.=notice;*.=warn |/dev/xconsole

, Z+ g) l) ]4 p! E& M" d解决办法:
' ?( K1 X% k# I$ ]5 Z所以需修改该配置文件,将注释放开。
/ @+ q* L5 _5 S; h, F- Kroot@controller:/var/log# vim /etc/rsyslog.d/50-default.conf 9 n! [, ]$ F* R& O' ~% y1 d
( ?) k9 M3 f+ E
# Some "catch-all" log files.
: X" I- a0 l# T! f- X#
& p- r2 _/ J# Q" ?# f8 T*.=debug;\* i" R8 g% V1 |% e' @
        auth,authpriv.none;\
" Q8 w: v+ `' O" Q, m        news.none;mail.none     -/var/log/debug
, f9 X3 J8 C/ e7 R* l*.=info;*.=notice;*.=warn;\3 L  j6 L6 c& L* q5 l( S1 u
        auth,authpriv.none;\% a: U7 S3 v8 S" q
        cron,daemon.none;\8 R6 [& Y% A1 ]0 E7 t
        mail,news.none          -/var/log/messages  `4 U8 T! T1 @! m- {$ w

" K6 P0 ^6 M2 m' U然后重启rsyslog服务即可:
: T) b, l3 z+ ^2 H# F+ ^  [3 }9 h5 O1 L& F/ J# U0 _( a5 S: N& m  B
root@controller:/var/log# service rsyslog restart " m# ?9 s( f8 u5 g
rsyslog stop/waiting
5 H& B% L' ~7 x5 }6 ~7 ~% trsyslog start/running, process 749070 [7 `  a5 m" l4 N7 Q
2 F' z8 [  D* y5 Z

) |6 O4 O+ k& }  Z4 R4 ]& m/ E& O1 |再次查看,就有日志了:& Y& u6 ]9 A2 c) M9 ?
root@controller:/var/log# ls% D, w4 b  \: ^+ ]- E
alternatives.log  boot.log       chrony        dmesg.0     dmesg.3.gz  faillog    kern.log   messages              udev                 wtmp7 ?" M5 {* V4 d- C
apt               bootstrap.log  dist-upgrade  dmesg.1.gz  dmesg.4.gz  fsck       landscape  syslog                unattended-upgrades6 q) M/ H: k8 }  e& k
auth.log          btmp           dmesg         dmesg.2.gz  dpkg.log    installer  lastlog    ubuntu-advantage.log  upstart3 v2 D7 c, y9 ?2 g2 y" w. P
root@controller:/var/log# 6 ?2 p8 |& O- q% G* _3 _/ |) U7 m

' p! M2 V+ y" f+ g% k4 ]8 ?! F& R5 c2 `* ^7 G
问题解决。0 `, ^( \. t6 J1 r' X" _

# F/ r) |) t( j  l  N0 H2 N5 B: T
您需要登录后才可以回帖 登录 | 注册

本版积分规则

返回首页|Archiver|手机版|小黑屋|易陆发现技术论坛 ( 蜀ICP备2026014127号-1 )

GMT+8, 2026-6-12 04:07 , Processed in 0.025534 second(s), 21 queries .

Powered by Discuz! X5.0

© 2001-2026 Discuz! Team.

快速回复 返回顶部 返回列表