{"id":868,"date":"2014-04-06T22:42:34","date_gmt":"2014-04-06T14:42:34","guid":{"rendered":"https:\/\/www.ipcpu.com\/?p=868"},"modified":"2014-04-06T22:42:34","modified_gmt":"2014-04-06T14:42:34","slug":"syslog-ng","status":"publish","type":"post","link":"https:\/\/c.ipcpu.com\/2014\/04\/syslog-ng\/","title":{"rendered":"syslog-ng\u670d\u52a1\u5668\u4ecb\u7ecd\u548c\u642d\u5efa\u8fc7\u7a0b"},"content":{"rendered":"
<\/div>\n

syslog-ng\u670d\u52a1\u5668\u4ecb\u7ecd\u548c\u642d\u5efa\u8fc7\u7a0b.md<\/p>\n

1. \u6982\u8ff0<\/h2>\n

Syslog\u5e38\u88ab\u79f0\u4e3a\u7cfb\u7edf\u65e5\u5fd7\u6216\u7cfb\u7edf\u8bb0\u5f55\uff0c\u662f\u4e00\u79cd\u7528\u6765\u5728\u4e92\u8054\u7f51\u534f\u5b9a\uff08TCP\/IP\uff09\u7684\u7f51\u7edc\u4e2d\u4f20\u9012\u8bb0\u5f55\u6863\u8baf\u606f\u7684\u6807\u51c6\u3002<\/p>\n

Syslog\u4e3b\u8981\u8bb0\u5f55\u8def\u7531\u5668\u3001\u4ea4\u6362\u673a\u548c\u9632\u706b\u5899\u7b49\u7f51\u7edc\u8bbe\u5907\u548cLinux\u53caunix\u670d\u52a1\u5668\u542f\u52a8\u53ca\u8fd0\u884c\u7684\u8fc7\u7a0b\u4e2d\u4ea7\u751f\u7684\u4fe1\u606f\u3002<\/p>\n

Linux\u7cfb\u7edf\u90fd\u81ea\u5e26syslog\u670d\u52a1\u7aef\uff0cRHEL 5\u7cfb\u7edf\u4e0a\u9ed8\u8ba4\u81ea\u5e26\u4e86syslog,RHEL 6\u7cfb\u7edf\u5347\u7ea7\u4e3arsyslog\uff0c\u4f46\u529f\u80fd\u90fd\u4e0d\u662f\u5f88\u5f3a\u5927\uff0c\u56e0\u6b64\u5c31\u6709\u4e86syslog-ng\u3002syslog-ng (syslog-Next generation) \u662fsyslog\u7684\u5347\u7ea7\u7248,syslog-ng\u6709\u4e24\u4e2a\u7248\u672c,\u4f5c\u4e3asyslog\u7684\u4e0b\u4e00\u4ee3\u3002\u4ea7\u54c1,\u529f\u80fd\u662f\u53ef\u60f3\u800c\u77e5,\u80af\u5b9a\u6bd4syslog\u7684\u529f\u80fd\u5f3a\u5927\u7684\u591a,\u5982\u9ad8\u6027\u80fd\u3001\u53ef\u9760\u7684\u4f20\u8f93\u3001\u652f\u6301\u591a\u5e73\u53f0\u3001\u9ad8\u53ef\u9760\u6027\u3001\u5f3a\u5927\u7684\u65e5\u5fd7\u8fc7\u6ee4\u53ca\u6392\u5e8f\u3001\u4e8b\u4ef6\u6807\u7b7e\u548c\u5173\u8054\u6027\u7b49\u7b49\u3002<\/p>\n

syslog-ng\u5176\u5b98\u65b9\u7f51\u7ad9\u662fhttps:\/\/syslog-ng.org\/<\/a><\/p>\n

2. syslog-ng\u670d\u52a1\u642d\u5efa<\/h2>\n

2.1 syslog-ng\u670d\u52a1\u5b89\u88c5<\/h3>\n

\u5728CentOS\u4e2d\u6211\u4eec\u901a\u8fc7yum\u53ef\u4ee5\u76f4\u63a5\u5b89\u88c5<\/p>\n

  1. #@install epel first<\/span><\/code><\/li>
  2. yum install syslog<\/span>-<\/span>ng syslog<\/span>-<\/span>ng<\/span>-<\/span>libdbi <\/span>-<\/span>y<\/span><\/code><\/li><\/ol><\/pre>\n
    2.2  syslog-ng\u670d\u52a1\u914d\u7f6e<\/h3>\n
    syslog-ng\u7684\u914d\u7f6e\u6587\u4ef6\u662f\/etc\/syslog-ng\/syslog-ng.conf<\/p>\n
    1. @version<\/span>:<\/span>3.2<\/span><\/code><\/li>
    2. <\/code><\/li>
    3. # syslog-ng configuration file.<\/span><\/code><\/li>
    4. <\/code><\/li>
    5. #global options<\/span><\/code><\/li>
    6. options <\/span>{<\/span><\/code><\/li>
    7.     flush_lines <\/span>(<\/span>0<\/span>);<\/span><\/code><\/li>
    8.     time_reopen <\/span>(<\/span>10<\/span>);<\/span><\/code><\/li>
    9.     log_fifo_size <\/span>(<\/span>1000<\/span>);<\/span><\/code><\/li>
    10.     long_hostnames <\/span>(<\/span>off<\/span>);<\/span><\/code><\/li>
    11.     use_dns <\/span>(<\/span>no<\/span>);<\/span><\/code><\/li>
    12.     use_fqdn <\/span>(<\/span>no<\/span>);<\/span><\/code><\/li>
    13.     create_dirs<\/span>(<\/span>yes<\/span>);<\/span><\/code><\/li>
    14.     keep_hostname <\/span>(<\/span>yes<\/span>);<\/span><\/code><\/li>
    15.     perm <\/span>(<\/span>0640<\/span>);<\/span><\/code><\/li>
    16.     dir_perm <\/span>(<\/span>0750<\/span>);<\/span><\/code><\/li>
    17.     <\/span>group<\/span> <\/span>(<\/span>root<\/span>);<\/span><\/code><\/li>
    18.     dir_group <\/span>(<\/span>root<\/span>);<\/span><\/code><\/li>
    19. };<\/span><\/code><\/li>
    20. <\/code><\/li>
    21. #source<\/span><\/code><\/li>
    22. source s_localhost <\/span>{<\/span><\/code><\/li>
    23.     file <\/span>(<\/span>\"\/proc\/kmsg\"<\/span> program_override<\/span>(<\/span>\"kernel: \"<\/span>));<\/span><\/code><\/li>
    24.     unix<\/span>-<\/span>stream <\/span>(<\/span>\"\/dev\/log\"<\/span>);<\/span><\/code><\/li>
    25.     <\/span>internal<\/span>();<\/span><\/code><\/li>
    26. };<\/span><\/code><\/li>
    27. <\/code><\/li>
    28. source s_network <\/span>{<\/span><\/code><\/li>
    29.     udp<\/span>(<\/span>ip<\/span>(<\/span>172.1<\/span>.<\/span>10.31<\/span>)<\/span> port<\/span>(<\/span>514<\/span>));<\/span><\/code><\/li>
    30.     tcp<\/span>(<\/span>ip<\/span>(<\/span>172.1<\/span>.<\/span>10.31<\/span>)<\/span> port<\/span>(<\/span>514<\/span>)<\/span> max<\/span>-<\/span>connections<\/span>(<\/span>333<\/span>));<\/span><\/code><\/li>
    31. };<\/span><\/code><\/li>
    32. <\/code><\/li>
    33. #filter<\/span><\/code><\/li>
    34. filter mail_filter <\/span>{<\/span> <\/span>not<\/span> facility<\/span>(<\/span>mail<\/span>);<\/span> <\/span>};<\/span><\/code><\/li>
    35. <\/code><\/li>
    36. #destination<\/span><\/code><\/li>
    37. destination d_localhost <\/span>{<\/span><\/code><\/li>
    38.                file <\/span>(<\/span>\"\/data\/syslog-ng\/$YEAR.$MONTH.$DAY\/localhost\/$FACILITY.log\"<\/span>);<\/span><\/code><\/li>
    39. };<\/span><\/code><\/li>
    40. <\/code><\/li>
    41. destination d_network <\/span>{<\/span><\/code><\/li>
    42.               file <\/span>(<\/span>\"\/data\/syslog-ng\/$YEAR.$MONTH.$DAY\/$SOURCEIP\/$FACILITY.log\"<\/span>);<\/span><\/code><\/li>
    43. };<\/span><\/code><\/li>
    44. <\/code><\/li>
    45. #logging action<\/span><\/code><\/li>
    46. log <\/span>{<\/span>         source<\/span>(<\/span>s_localhost<\/span>);<\/span><\/code><\/li>
    47.           destination<\/span>(<\/span>d_localhost<\/span>);<\/span><\/code><\/li>
    48. };<\/span><\/code><\/li>
    49. <\/code><\/li>
    50. log <\/span>{<\/span>          source<\/span>(<\/span>s_network<\/span>);<\/span><\/code><\/li>
    51.            filter <\/span>(<\/span>mail_filter<\/span>);<\/span><\/code><\/li>
    52.            destination<\/span>(<\/span>d_network<\/span>);<\/span><\/code><\/li>
    53. };<\/span><\/code><\/li><\/ol><\/pre>\n
      \u6ce8\u610fTIPS<\/strong><\/p>\n
      \n
      $<\/span>SOURCEIP\u662f\u6e90IP\uff0c\u4e0d\u8981\u4f7f\u7528$HOST\uff0c\u9632\u6b62\u5ba2\u6237\u7aef\u4e3b\u673a\u540d\u91cd\u590d 
      \n  create_dirs(yes)\u6253\u5f00\uff0c\u5426\u5219\u4e0d\u80fd\u81ea\u52a8\u521b\u5efa\u76ee\u5f55 
      \n  \u6ce8\u610f\u5173\u95edrsyslog\u540e\u5728\u5f00\u542fsyslog-ng 
      \n  \u7531\u4e8eLinux\u7cfb\u7edf\u7684mail\u65e5\u5fd7\u8f83\u5927\uff0c\u8fd9\u91cc\u8fdb\u884c\u4e86\u8fc7\u6ee4<\/p>\n<\/blockquote>\n
      3.    \u5ba2\u6237\u7aef\u914d\u7f6e<\/h2>\n
      3.1    Linux\u914d\u7f6e<\/h3>\n
      Linux\u53ea\u9700\u8981\u5728\/etc\/rsyslog.conf\u52a0\u5165\u4ee5\u4e0b\u8bed\u53e5\uff0c\u91cd\u542frsyslog\u670d\u52a1<\/p>\n
      1. *.*<\/span>    <\/span>@<\/span>172.1<\/span>.<\/span>10.31<\/span><\/code><\/li><\/ol><\/pre>\n
        3.2    \u7f51\u7edc\u8bbe\u5907\u914d\u7f6e<\/h3>\n
        \u7f51\u7edc\u8bbe\u5907\u6307\u5b9asyslog\u670d\u52a1\u5668IP\u5730\u5740\u5373\u53ef\uff0c\u4ee5cisco\u4e3a\u4f8b<\/p>\n
        1. logging trap warnings<\/span><\/code><\/li>
        2. !<\/span>logging facility local7<\/span><\/code><\/li>
        3. logging host <\/span>172.1<\/span>.<\/span>10.31<\/span><\/code><\/li><\/ol><\/pre>\n
          4.    \u670d\u52a1\u5668\u7aef\u68c0\u67e5<\/h2>\n
          \u914d\u7f6e\u5b8c\u5ba2\u6237\u7aef\u540e\uff0c\u53ef\u4ee5\u5728syslog-ng\u76ee\u5f55\u4e2d\u770b\u5230\u81ea\u52a8\u751f\u6210\u7684\u76ee\u5f55\u548c\u6587\u4ef6<\/p>\n
          1. [<\/span>root@TV<\/span>-<\/span>IT<\/span>-<\/span>SYSLOG<\/span>-<\/span>01<\/span> <\/span>~]#<\/span>tree <\/span>\/<\/span>data<\/span>\/<\/span>syslog<\/span>-<\/span>ng<\/span>\/<\/span>2016.07<\/span>.<\/span>21<\/span>\/<\/span><\/code><\/li>
          2. \/data\/<\/span>syslog<\/span>-<\/span>ng<\/span>\/<\/span>2016.07<\/span>.<\/span>21<\/span>\/<\/span><\/code><\/li>
          3. \u251c\u2500\u2500<\/span> <\/span>172.1<\/span>.<\/span>10.22<\/span><\/code><\/li>
          4. \u2502<\/span>   <\/span>\u251c\u2500\u2500<\/span> authpriv<\/span>.<\/span>log<\/span><\/code><\/li>
          5. \u2502<\/span>   <\/span>\u251c\u2500\u2500<\/span> cron<\/span>.<\/span>log<\/span><\/code><\/li>
          6. \u2502<\/span>   <\/span>\u2514\u2500\u2500<\/span> local6<\/span>.<\/span>log<\/span><\/code><\/li>
          7. \u251c\u2500\u2500<\/span> <\/span>172.16<\/span>.<\/span>201.20<\/span><\/code><\/li>
          8. \u2502<\/span>   <\/span>\u2514\u2500\u2500<\/span> local7<\/span>.<\/span>log<\/span><\/code><\/li>
          9. \u251c\u2500\u2500<\/span> <\/span>172.16<\/span>.<\/span>201.21<\/span><\/code><\/li>
          10. \u2502<\/span>   <\/span>\u2514\u2500\u2500<\/span> local7<\/span>.<\/span>log<\/span><\/code><\/li>
          11. \u251c\u2500\u2500<\/span> <\/span>172.16<\/span>.<\/span>201.51<\/span><\/code><\/li>
          12. \u2502<\/span>   <\/span>\u2514\u2500\u2500<\/span> local7<\/span>.<\/span>log<\/span><\/code><\/li>
          13. \u2514\u2500\u2500<\/span> localhost<\/span><\/code><\/li>
          14.     <\/span>\u251c\u2500\u2500<\/span> cron<\/span>.<\/span>log<\/span><\/code><\/li>
          15.     <\/span>\u2514\u2500\u2500<\/span> syslog<\/span>.<\/span>log<\/span><\/code><\/li>
          16. <\/code><\/li>
          17. 5<\/span> directories<\/span>,<\/span> <\/span>8<\/span> files<\/span><\/code><\/li>
          18. [<\/span>root@TV<\/span>-<\/span>IT<\/span>-<\/span>SYSLOG<\/span>-<\/span>01<\/span> <\/span>~]#<\/span><\/code><\/li><\/ol><\/pre>\n
            \u8f6c\u8f7d\u8bf7\u6ce8\u660e\uff1aIPCPU-\u7f51\u7edc\u4e4b\u8def<\/a> » syslog-ng\u670d\u52a1\u5668\u4ecb\u7ecd\u548c\u642d\u5efa\u8fc7\u7a0b<\/a><\/p>","protected":false},"excerpt":{"rendered":"
            syslog-ng\u670d\u52a1\u5668\u4ecb\u7ecd\u548c\u642d\u5efa\u8fc7\u7a0b.md 1. \u6982\u8ff0 Syslog\u5e38\u88ab\u79f0\u4e3a\u7cfb\u7edf\u65e5\u5fd7\u6216\u7cfb\u7edf\u8bb0\u5f55\uff0c\u662f\u4e00\u79cd\u7528\u6765\u5728\u4e92\u8054\u7f51\u534f\u5b9a\uff08TCP\/IP\uff09\u7684\u7f51\u7edc\u4e2d\u4f20\u9012\u8bb0\u5f55\u6863\u8baf\u606f\u7684\u6807\u51c6\u3002 Syslog\u4e3b\u8981\u8bb0\u5f55\u8def\u7531\u5668\u3001\u4ea4\u6362\u673a\u548c\u9632\u706b\u5899\u7b49\u7f51\u7edc\u8bbe\u5907\u548cLinux\u53caunix\u670d\u52a1\u5668\u542f\u52a8\u53ca\u8fd0\u884c\u7684\u8fc7\u7a0b\u4e2d\u4ea7\u751f\u7684\u4fe1\u606f\u3002 Linux\u7cfb\u7edf\u90fd\u81ea\u5e26syslog\u670d\u52a1\u7aef\uff0cRHEL 5\u7cfb\u7edf\u4e0a\u9ed8\u8ba4\u81ea\u5e26\u4e86syslog,RHEL 6\u7cfb\u7edf\u5347\u7ea7\u4e3arsyslog\uff0c\u4f46\u529f\u80fd\u90fd\u4e0d\u662f\u5f88\u5f3a\u5927\uff0c\u56e0\u6b64\u5c31\u6709\u4e86syslog-ng\u3002syslog-ng (syslog-Next generation) \u662fsyslog\u7684\u5347\u7ea7\u7248,syslog-ng\u6709\u4e24\u4e2a\u7248\u672c,\u4f5c\u4e3asyslog\u7684\u4e0b\u4e00\u4ee3\u3002\u4ea7\u54c1,\u529f\u80fd\u662f\u53ef\u60f3\u800c\u77e5,\u80af\u5b9a\u6bd4syslog\u7684\u529f\u80fd\u5f3a\u5927\u7684\u591a,\u5982\u9ad8\u6027\u80fd\u3001\u53ef\u9760\u7684\u4f20\u8f93\u3001\u652f\u6301\u591a\u5e73\u53f0\u3001\u9ad8\u53ef\u9760\u6027\u3001\u5f3a\u5927\u7684\u65e5\u5fd7\u8fc7\u6ee4\u53ca\u6392\u5e8f\u3001\u4e8b\u4ef6\u6807\u7b7e\u548c\u5173\u8054\u6027\u7b49\u7b49\u3002 syslog-ng\u5176\u5b98\u65b9\u7f51\u7ad9\u662fhttps:\/\/syslog-ng.org\/ 2. syslog-ng\u670d\u52a1\u642d\u5efa 2.1 syslog-ng\u670d\u52a1\u5b89\u88c5 \u5728CentOS\u4e2d\u6211\u4eec\u901a\u8fc7yum\u53ef\u4ee5\u76f4\u63a5\u5b89\u88c5 #@install epel firstyum install syslog-ng syslog-ng-libdbi -y 2.2 syslog-ng\u670d\u52a1\u914d\u7f6e syslog-ng\u7684\u914d\u7f6e\u6587\u4ef6\u662f\/etc\/syslog-ng\/syslog-ng.conf @version:3.2# syslog-ng configuration file.#global optionsoptions { flush_lines (0); time_reopen (10); log_fifo_size (1000); long_hostnames (off); use_dns (no); use_fqdn (no); create_dirs(yes); keep_hostname (yes); perm (0640); dir_perm (0750); group (root); dir_group […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[13],"tags":[17,132],"_links":{"self":[{"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/posts\/868"}],"collection":[{"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/comments?post=868"}],"version-history":[{"count":0,"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/posts\/868\/revisions"}],"wp:attachment":[{"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/media?parent=868"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/categories?post=868"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/tags?post=868"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}