User Tools
регистрация_событий_в_linux
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
регистрация_событий_в_linux [2025/02/07 10:40] val [Регистрация сообщений, переданных по сети] |
регистрация_событий_в_linux [2026/07/21 11:10] (current) val [Регистрация сообщений, переданных по сети] |
||
|---|---|---|---|
| Line 21: | Line 21: | ||
| <code> | <code> | ||
| $ systemctl -a | grep syslog | $ systemctl -a | grep syslog | ||
| + | или | ||
| + | # apt install rsyslog | ||
| $ less /etc/rsyslog.conf | $ less /etc/rsyslog.conf | ||
| $ man rsyslog.conf | $ man rsyslog.conf | ||
| + | |||
| + | # rsyslogd -N1 | ||
| </code> | </code> | ||
| Line 37: | Line 41: | ||
| debian# chown root:adm /var/log/cisco.log | debian# chown root:adm /var/log/cisco.log | ||
| ubuntu# chown syslog:adm /var/log/cisco.log | ubuntu# chown syslog:adm /var/log/cisco.log | ||
| - | |||
| - | root@server:~# rsyslogd -N1 | ||
| root@server:~# service rsyslog restart | root@server:~# service rsyslog restart | ||
| Line 63: | Line 65: | ||
| # cat /etc/rsyslog.d/my.conf | # cat /etc/rsyslog.d/my.conf | ||
| </code><code> | </code><code> | ||
| - | ... | + | #... |
| module(load="imfile") | module(load="imfile") | ||
| + | |||
| + | input(type="imfile" File="/var/log/audit/audit.log" | ||
| + | Tag="audit" | ||
| + | Severity="info" | ||
| + | Facility="local6") | ||
| + | |||
| input(type="imfile" File="/var/log/openvpn/openvpn_status_bmstu.log" | input(type="imfile" File="/var/log/openvpn/openvpn_status_bmstu.log" | ||
| Tag="openvpn" | Tag="openvpn" | ||
| Severity="info" | Severity="info" | ||
| Facility="local0") | Facility="local0") | ||
| - | ... | + | |
| - | *.* @server.corp13.un | + | #:msg, contains, "adduser" ~ |
| + | #:msg, contains, "edituser" ~ | ||
| + | |||
| + | #*.* @server.corpX.un:8514 | ||
| + | #*.* @192.168.100+X.10 | ||
| </code> | </code> | ||
| ==== Передача сообщений на STDIN программы ==== | ==== Передача сообщений на STDIN программы ==== | ||
регистрация_событий_в_linux.1738914018.txt.gz · Last modified: 2025/02/07 10:40 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
