linux 日志库调试

# 示例：配置rsyslog进行日志轮转
$ vi /etc/rsyslog.conf
# 在文件中添加以下内容
$MaxMessageSize 1048576  # 设置单个日志消息的最大大小
$FileOwner root
$FileGroup adm
$FileCreateMode 0640
$DirCreateMode 0755
$Umask 0022
$IncludeConfig /etc/rsyslog.d/*.conf
$ModLoad immark
$ModLoad imudp
$UDPServerRun 514
$ModLoad imtcp
$InputTCPServerRun 514
local7.*    /var/log/boot.log
local0.*    /var/log/messages
local1.*    /var/log/secure
local2.*    /var/log/maillog
local3.*    /var/log/cron
local4.*    /var/log/spooler
local5.*    /var/log/news/news.crit
local6.*    /var/log/httpd/access_log
local7.*    /var/log/httpd/error_log
*.emerg    :omusrmsg:*
mail.*      -/var/log/maillog
*.info;mail.none;authpriv.none;cron.none    /var/log/messages
authpriv.*    /var/log/secure
cron.*    /var/log/cron
*.emerg    :omusrmsg:*
mail.*    -/var/log/maillog
*.info;mail.none;authpriv.none;cron.none    /var/log/messages
authpriv.*    /var/log/secure
cron.*    /var/log/cron

# 示例：配置logrotate进行日志轮转
$ vi /etc/logrotate.d/syslog
# 在文件中添加以下内容
/var/log/messages
{
    rotate 4
    weekly
    compress
    delaycompress
    missingok
    notifempty
    create 640 root adm
}

# 示例：调整rsyslog的日志级别
$ vi /etc/rsyslog.conf
# 将以下内容修改为合适的日志级别
*.info;mail.none;authpriv.none;cron.none    /var/log/messages

# 示例：使用rsyslog的过滤功能
$ vi /etc/rsyslog.conf
# 在文件中添加以下内容
if $programname == 'httpd' then /var/log/httpd/access_log
& stop