This shows you the differences between two versions of the page.
Next revision | Previous revision | ||
регистрация_событий_в_freebsd [2011/02/21 17:07] val created |
регистрация_событий_в_freebsd [2018/03/02 16:08] (current) val [Настройка клиента] |
||
---|---|---|---|
Line 3: | Line 3: | ||
===== Сервис syslog ===== | ===== Сервис syslog ===== | ||
- | man syslog.conf | + | * [[http://ru.wikipedia.org/wiki/Syslog|syslog]] |
+ | |||
+ | ===== Использование утилиты logger ===== | ||
+ | |||
+ | * [[Средства программирования shell#Передача сообщений в syslog]] в shell скриптах | ||
- | ==== Варианты использования ==== | ||
<code> | <code> | ||
# shutdown -p 17:30 | # shutdown -p 17:30 | ||
- | # logger -t clamd -p kern.emerg 'Kernel Panic' | + | $ logger -t kernel -p kern.emerg 'Kernel Panic' |
+ | |||
+ | $ logger -t sendmail -p mail.info 'Message from sendmail' | ||
</code> | </code> | ||
- | ==== Настройка на обработку сообщений от сервиса ==== | + | ===== Настройка на обработку сообщений типа local0 ===== |
<code> | <code> | ||
- | # cat syslog.conf | + | # cat /etc/syslog.conf |
</code><code> | </code><code> | ||
... | ... | ||
- | local6.* /var/log/clamd.log | + | local0.* /var/log/cisco.log |
!ppp | !ppp | ||
... | ... | ||
</code><code> | </code><code> | ||
- | # touch /var/log/clamd.log | + | # touch /var/log/cisco.log |
- | # /etc/rc.d/syslogd reload | + | # service syslogd reload |
- | # clamdscan virus.zip | + | # tail -f /var/log/cisco.log |
</code> | </code> | ||
- | ==== Ротация файлов регистрации ==== | + | ===== Регистрация сообщений переданных по сети ===== |
<code> | <code> | ||
- | # cat /etc/newsyslog.conf | + | # cat /etc/rc.conf |
</code><code> | </code><code> | ||
... | ... | ||
- | /var/log/clamd.log 600 7 10 * J | + | syslogd_flags="-a 192.168.X.0/24:*" |
- | /var/log/httpd-access.log 644 10 1000 * JC /var/run/httpd.pid 30 | + | ... |
- | /var/log/httpd-error.log 644 10 1000 * JC /var/run/httpd.pid 30 | + | |
- | /var/log/httpd-ssl_request.log 644 10 1000 * JC /var/run/httpd.pid 30 | + | |
</code><code> | </code><code> | ||
- | # cat logger.sh | + | # service syslogd restart |
- | </code><code> | + | |
- | while : | + | |
- | do | + | |
- | logger -t clamd -p local7.info "Message 1" | + | |
- | logger -t clamd -p local7.info "Message 2" | + | |
- | done | + | |
- | </code><code> | + | |
- | # sh logger.sh | + | |
- | ... | + | |
- | <Ctrl>-C | + | |
- | + | ||
- | # tail -f /var/log/clamd.log | + | |
- | ... | + | |
- | <Ctrl>-C | + | |
- | + | ||
- | # newsyslog | + | |
- | + | ||
- | # ls -l /var/log/clamd.log* | + | |
</code> | </code> | ||
- | ==== Использование syslogd в сети ==== | + | ===== Настройка клиента ===== |
<code> | <code> | ||
- | [server:~] # cat /etc/rc.conf | + | [cisco:~] # cat /etc/syslog.conf |
</code><code> | </code><code> | ||
... | ... | ||
- | syslogd_flags="-a 192.168.X.0/24:*" | + | *.* @server.corp13.un |
- | ... | + | |
- | </code><code> | + | |
- | [server:~] # cat /etc/syslog.conf | + | |
- | </code><code> | + | |
- | ... | + | |
- | local0.* /var/log/cisco.log | + | |
!ppp | !ppp | ||
... | ... | ||
</code><code> | </code><code> | ||
- | [server:~] # touch /var/log/cisco.log | + | [cisco:~] # service syslogd reload |
- | + | ||
- | [server:~] # /etc/rc.d/syslogd restart | + | |
- | + | ||
- | [server:~] # tail -f /var/log/cisco.log | + | |
</code> | </code> | ||
- | ==== Настройка клиента ==== | + | ===== Дополнительные материалы ===== |
- | <code> | + | |
- | [cisco:~] # cat /etc/syslog.conf | + | |
- | *.* @server | + | |
- | ... | + | |
- | + | ||
- | [cisco:~] # /etc/rc.d/syslogd restart | + | |
- | </code> | + | |
- | + | ||
- | ==== Приложения ==== | + | |
- | === Передача сообщений syslogd в программу === | + | ==== Передача сообщений syslogd в программу ==== |
<code> | <code> | ||
- | # cat syslog.sh | + | # cat /root/syslog.sh |
</code><code> | </code><code> | ||
#!/bin/sh | #!/bin/sh | ||
Line 115: | Line 80: | ||
... | ... | ||
</code> | </code> | ||
- |