Moxa UC-8410A-LX [43/86] Rocket fast system for log processing rsyslog

Moxa UC-8410A-T-LX [43/86] Rocket fast system for log processing rsyslog
UC-8410A Series Linux Software General Debian Package Usage
5-3
3. Modify the /etc/crontab file to run fixtime.sh every 10 minutes (i.e.: */10) by adding this line:
*/10 * * * * root /home/fixtime.sh
NOTE
Click the following link for more information on cron.
http://www.debian
-administration.org/articles/56
Rocket-Fast System for Log Processing: rsyslog
Rsyslog is an enhanced, multi-threaded log reporting utility with a focus on security and reliability. It offers
support for on-demand disk buffering, log reports and alarms delivered over TCP, SSL, TLS, and RELP, writing
to databases, and email alerting. It is a drop-in replacement for syslogd.
Rsyslog is installed but disabled by default.
Enable rsyslog manually /etc/init.d/rsyslog start
Disable rsyslog manually /etc/init.d/rsyslog stop
Enable rsyslog insserv -d rsyslog
Disable rsyslog insserv -r rsyslog
Rsyslog’s Configuration File
The syntax of the /etc/rsyslog.conf file is detailed in the rsyslog.conf(5) manual page, but there is also HTML
documentation available in the rsyslog-doc package (/usr/share/doc/rsyslog-doc/html/index.html).
The overall principle is to write “selector” and “action” pairs. The selector defines all relevant messages, and the
action describes how to deal with them.
Each message is associated with an application, called a facility in rsyslog documentation:
auth and authpriv for authentication
cron comes from task scheduling services, cron and atd
daemon affects a daemon without any special classification (DNS, NTP, etc.)
ftp concerns the FTP server
kern message coming from the kernel
lpr comes from the printing subsystem
mail comes from the e-mail subsystem
news Usenet subsystem message (especially from an NNTP Network News Transfer
Protocol server that manages newsgroups)
syslog messages from the syslogd server, itself
user user messages (generic)
uucp messages from the UUCP server (Unix to Unix Copy Program, an old protocol notably
used to distribute e-mail messages)
local0 to local7 reserved for local use
Each message is also associated with a priority level. Here is the list in decreasing order:
emerg Help! There's an emergency, the system is probably unusable.
alert hurry up, any delay can be dangerous, action must be taken immediately
crit conditions are critical
err error
warn warning (potential error)
notice conditions are normal, but the message is important
info informative message
debug debugging message

Содержание

Скачать