User Tools
регистрация_событий_в_linux
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
регистрация_событий_в_linux [2026/07/31 15:05] val [Регистрация сообщений, переданных по сети] |
регистрация_событий_в_linux [2026/08/08 17:47] (current) val [Журнал важных сообщений] |
||
|---|---|---|---|
| Line 9: | Line 9: | ||
| <code> | <code> | ||
| $ logger -t postfix -p mail.info 'Message from postfix' | $ logger -t postfix -p mail.info 'Message from postfix' | ||
| + | |||
| + | $ logger -t prog1 -p local1.warn 'Prog1 Warning' | ||
| + | $ logger -t prog1 -p local1.err 'Prog1 Error' | ||
| $ logger -t kernel -p kern.emerg 'Kernel Panic' | $ logger -t kernel -p kern.emerg 'Kernel Panic' | ||
| Line 32: | Line 35: | ||
| ==== Настройка на обработку сообщений типа local0 ==== | ==== Настройка на обработку сообщений типа local0 ==== | ||
| + | |||
| + | * [[Сервис ротации журналов]] | ||
| + | |||
| <code> | <code> | ||
| root@server:~# cat /etc/rsyslog.d/30-cisco.conf | root@server:~# cat /etc/rsyslog.d/30-cisco.conf | ||
| Line 78: | Line 84: | ||
| Facility="local0") | Facility="local0") | ||
| - | #:msg, contains, "adduser" ~ | + | #:msg, contains, "adduser" stop |
| - | #:msg, contains, "edituser" ~ | + | #:msg, contains, "edituser" stop |
| #*.* @server.corpX.un:8514 | #*.* @server.corpX.un:8514 | ||
| Line 85: | Line 91: | ||
| </code> | </code> | ||
| - | ==== Изменение формата сообщений ==== | + | ==== Журнал важных сообщений ==== |
| <code> | <code> | ||
| - | # cat /etc/rsyslog.d/00-default-template.conf | + | # cat /etc/rsyslog.d/40-syslog-high.conf |
| </code><code> | </code><code> | ||
| - | template(name="CustomFileFormat" type="string" string="%TIMESTAMP% %HOSTNAME% [%syslogseverity-text%] %syslogtag%%msg%\n") | + | template(name="WithSeverityFacility" type="string" string="%TIMESTAMP% %HOSTNAME% [%syslogfacility-text%.%syslogseverity-text%] %syslogtag%%msg%\n") |
| - | $ActionFileDefaultTemplate CustomFileFormat | + | #$ActionFileDefaultTemplate WithSeverityFacility |
| - | </code><code> | + | |
| - | # cat /var/log/syslog | egrep -v '\[emerg\]|\[alert\]|\[crit\]|\[err\]|\[warning\]|\[notice\]|\[info\]|\[debug\]' | + | #*.* -/var/log/syslog.high;WithSeverityFacility |
| + | *.warning -/var/log/syslog.high;WithSeverityFacility | ||
| + | |||
| + | #if (not ($msg contains "PNP0A03") and | ||
| + | # not ($msg contains "LPM") and | ||
| + | # not ($msg contains "vmwgfx") and | ||
| + | # not ($msg contains "ehci_hcd")) then { | ||
| + | # *.warning;local3.none -/var/log/syslog.high;WithSeverityFacility | ||
| + | # local3.crit -/var/log/syslog.high;WithSeverityFacility | ||
| + | #} | ||
| + | </code> | ||
| + | * [[#Настройка на обработку сообщений типа local0]] | ||
| + | <code> | ||
| + | # cat /var/log/syslog.high | egrep -v '\[emerg\]|\[alert\]|\[crit\]|\[err\]|\[warning\]|\[notice\]|\[info\]|\[debug\]' | ||
| </code> | </code> | ||
| ==== Передача сообщений на STDIN программы ==== | ==== Передача сообщений на STDIN программы ==== | ||
регистрация_событий_в_linux.1785499524.txt.gz · Last modified: 2026/07/31 15:05 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
