User Tools
регистрация_событий_в_freebsd
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Last revision Both sides next revision | ||
|
регистрация_событий_в_freebsd [2011/02/21 17:29] val |
регистрация_событий_в_freebsd [2016/09/12 15:23] val [Настройка клиента] |
||
|---|---|---|---|
| Line 3: | Line 3: | ||
| ===== Сервис syslog ===== | ===== Сервис syslog ===== | ||
| - | man syslog.conf | + | * [[http://ru.wikipedia.org/wiki/Syslog|syslog]] |
| + | |||
| + | ===== Использование утилиты logger ===== | ||
| + | |||
| + | * [[Средства программирования shell#Передача сообщений в syslog]] в shell скриптах | ||
| - | ==== Варианты использования ==== | ||
| <code> | <code> | ||
| # shutdown -p 17:30 | # shutdown -p 17:30 | ||
| - | # logger -t kernel -p kern.emerg 'Kernel Panic' | + | $ logger -t kernel -p kern.emerg 'Kernel Panic' |
| - | # logger -t sendmail -p mail.info 'Clamav Panic' | + | $ logger -t sendmail -p mail.info 'Message from sendmail' |
| </code> | </code> | ||
| - | ==== Настройка на обработку сообщений от сервиса ==== | + | ===== Настройка на обработку сообщений типа local0 ===== |
| <code> | <code> | ||
| # cat /etc/syslog.conf | # cat /etc/syslog.conf | ||
| </code><code> | </code><code> | ||
| ... | ... | ||
| - | local6.* /var/log/clamd.log | + | local0.* /var/log/cisco.log |
| !ppp | !ppp | ||
| ... | ... | ||
| </code><code> | </code><code> | ||
| - | # touch /var/log/clamd.log | + | # touch /var/log/cisco.log |
| - | # /etc/rc.d/syslogd reload | + | # service syslogd reload |
| - | # clamdscan virus.zip | + | # tail -f /var/log/cisco.log |
| </code> | </code> | ||
| - | ==== Ротация файлов регистрации ==== | + | ===== Регистрация сообщений переданных по сети ===== |
| <code> | <code> | ||
| - | # cat /etc/newsyslog.conf | + | # cat /etc/rc.conf |
| - | </code><code> | + | |
| - | ... | + | |
| - | /var/log/clamd.log 600 7 10 * J | + | |
| - | /var/log/httpd-access.log 644 10 1000 * JC /var/run/httpd.pid 30 | + | |
| - | /var/log/httpd-error.log 644 10 1000 * JC /var/run/httpd.pid 30 | + | |
| - | /var/log/httpd-ssl_request.log 644 10 1000 * JC /var/run/httpd.pid 30 | + | |
| - | </code><code> | + | |
| - | # cat logger.sh | + | |
| - | </code><code> | + | |
| - | while : | + | |
| - | do | + | |
| - | logger -t clamd -p local7.info "Message 1" | + | |
| - | logger -t clamd -p local7.info "Message 2" | + | |
| - | done | + | |
| - | </code><code> | + | |
| - | # sh logger.sh | + | |
| - | ... | + | |
| - | <Ctrl>-C | + | |
| - | + | ||
| - | # tail -f /var/log/clamd.log | + | |
| - | ... | + | |
| - | <Ctrl>-C | + | |
| - | + | ||
| - | # newsyslog | + | |
| - | + | ||
| - | # ls -l /var/log/clamd.log* | + | |
| - | </code> | + | |
| - | + | ||
| - | ==== Использование syslogd в сети ==== | + | |
| - | + | ||
| - | <code> | + | |
| - | [server:~] # cat /etc/rc.conf | + | |
| </code><code> | </code><code> | ||
| ... | ... | ||
| Line 70: | Line 41: | ||
| ... | ... | ||
| </code><code> | </code><code> | ||
| - | [server:~] # cat /etc/syslog.conf | + | # service syslogd restart |
| - | </code><code> | + | |
| - | ... | + | |
| - | local0.* /var/log/cisco.log | + | |
| - | !ppp | + | |
| - | ... | + | |
| - | </code><code> | + | |
| - | [server:~] # touch /var/log/cisco.log | + | |
| - | + | ||
| - | [server:~] # /etc/rc.d/syslogd restart | + | |
| - | + | ||
| - | [server:~] # tail -f /var/log/cisco.log | + | |
| </code> | </code> | ||
| - | ==== Настройка клиента ==== | + | ===== Настройка клиента ===== |
| <code> | <code> | ||
| [cisco:~] # cat /etc/syslog.conf | [cisco:~] # cat /etc/syslog.conf | ||
| </code><code> | </code><code> | ||
| ... | ... | ||
| - | *.* @server | + | *.* @logserver |
| !ppp | !ppp | ||
| ... | ... | ||
| </code><code> | </code><code> | ||
| - | [cisco:~] # /etc/rc.d/syslogd restart | + | [cisco:~] # service syslogd reload |
| </code> | </code> | ||
| - | ==== Приложения ==== | + | ===== Дополнительные материалы ===== |
| - | === Передача сообщений syslogd в программу === | + | ==== Передача сообщений syslogd в программу ==== |
| <code> | <code> | ||
| - | # cat syslog.sh | + | # cat /root/syslog.sh |
| </code><code> | </code><code> | ||
| #!/bin/sh | #!/bin/sh | ||
| Line 120: | Line 80: | ||
| ... | ... | ||
| </code> | </code> | ||
| - | |||
регистрация_событий_в_freebsd.txt · Last modified: 2018/03/02 16:08 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
