- 论坛徽章:
- 0
|
本帖最后由 sea_smart 于 2018-07-04 08:49 编辑
请教如何实现http或者nginx日志转发到服务端指定的位置(例如/data/log/httplog_20180703.log),请给出详细配置,谢谢!
(目前这个是最简单,能实现客户端所有日志转发到服务端的message中,但是不在/data/log产生日志,不解?)
服务端:192.168.0.15 客户端:192.168.0.12
服务端配置rsyslog.conf:
[root@test ~]# grep -v ^# /etc/rsyslog.conf | grep -v ^$ |
$ModLoad imuxsock # provides support for local system logging (e.g. via logger command)
$ModLoad imklog # provides kernel logging support (previously done by rklogd)
$ModLoad imudp
$UDPServerRun 514
$ModLoad imtcp
$InputTCPServerRun 514
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$template HTTP,"/data/log/%192.168.0.12%/%192.168.0.12%_%$YEAR%-%$MONTH%-%$DAY%.log"
$AllowedSender tcp, 192.168.0.0/24
$IncludeConfig /etc/rsyslog.d/*.conf
*.info;mail.none;authpriv.none;cron.none /var/log/messages
authpriv.* /var/log/secure
mail.* -/var/log/maillog
cron.* /var/log/cron
*.emerg *
uucp,news.crit /var/log/spooler
local7.* /var/log/boot.log
$WorkDirectory /var/lib/rsyslog # where to place spool files
客户端配置:
[root@test2 etc]# grep -v ^# rsyslog.conf | grep -v ^$ | sed s/168.192.10/192.168.0/g
$ModLoad imuxsock # provides support for local system logging (e.g. via logger command)
$ModLoad imklog # provides kernel logging support (previously done by rklogd)
$ModLoad imudp
$UDPServerRun 514
$ModLoad imtcp
$InputTCPServerRun 514
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$IncludeConfig /etc/rsyslog.d/*.conf
*.info;mail.none;authpriv.none;cron.none /var/log/messages
authpriv.* /var/log/secure
mail.* -/var/log/maillog
cron.* /var/log/cron
*.emerg *
uucp,news.crit /var/log/spooler
local7.* /var/log/boot.log
*.* @@192.168.0.15:514
|
|