系统重启日志咨询

ggoodstudy

系统：Linux 5.4
一个刀库上所有服务器，Linux系统在/var/log/messages上都看到了如下的日志，问一下有些什么情况会使系统做如下日志的记录？断电情况已排除~~求指教！
Jan  1 04:02:03 localhost syslogd 1.4.1: restart

chenyx

这个貌似是正常的,是log轮询那个进程在重写logs

ggoodstudy

回复 2# chenyx


    正常的啊？？那怎么会写系统restart这个日志呢

chenyx

restart是因为要把原来的一些日志进行转储.
你看下/var/log下面的日志文件就会明白了

ggoodstudy

回复 4# chenyx


    谢谢！追问一下系统在什么情况下会进行转储日志？？

chenyx

系统有个logrotate功能,那个启用的话,就会进行日志转储
确切的说,是由cron任务定期执行的

ggoodstudy

回复 6# chenyx


    恩，谢谢！
   Jan  1 04:02:03 localhost syslogd 1.4.1: restart

这个日志是什么意思呢？？

chenyx

没什么意思,就是那个时间点,syslogd服务重启了一下

ggoodstudy

回复 8# chenyx


    恩，明白了！我再去学习一下logrotate的配置，谢谢楼上！！

jerryjzm

monitor:/home/monitor>more /etc/crontab
SHELL=/bin/bash
PATH=/sbin:/bin:/usr/sbin:/usr/bin
MAILTO=root
HOME=/

# run-parts
01 * * * * root run-parts /etc/cron.hourly
02 4 * * * root run-parts /etc/cron.daily
22 4 * * 0 root run-parts /etc/cron.weekly
42 4 1 * * root run-parts /etc/cron.monthly

monitor:/home/monitor>ls -l /etc/cron.daily
total 68
-rwxr-xr-x 1 root root  379 Dec 18  2006 0anacron
lrwxrwxrwx 1 root root   39 Aug 18  2010 0logwatch -> /usr/share/logwatch/scripts/logwatch.pl
-rwxr-xr-x 1 root root  118 Feb 25  2010 cups
-rwxr-xr-x 1 root root  180 Sep  2  2008 logrotate
-rwxr-xr-x 1 root root  418 Jul 13  2006 makewhatis.cron
-rwxr-xr-x 1 root root  137 Mar 17  2009 mlocate.cron
-rwxr-xr-x 1 root root 2181 Jun 21  2006 prelink
-rwxr-xr-x 1 root root  296 Jul 24  2009 rpm
-rwxr-xr-x 1 root root  328 Aug 27  2008 tmpwatch

monitor:/home/monitor>more /etc/cron.daily/logrotate
#!/bin/sh

/usr/sbin/logrotate /etc/logrotate.conf
EXITVALUE=$?
if [ $EXITVALUE != 0 ]; then
    /usr/bin/logger -t logrotate "ALERT exited abnormally with [$EXITVALUE]"
fi
exit 0
monitor:/home/monitor>more /etc/logrotate.conf
# see "man logrotate" for details
# rotate log files weekly
weekly

# keep 4 weeks worth of backlogs
rotate 4

# create new (empty) log files after rotating old ones
create

# uncomment this if you want your log files compressed
#compress

# RPM packages drop log rotation information into this directory
include /etc/logrotate.d

# no packages own wtmp -- we'll rotate them here
/var/log/wtmp {
    monthly
    minsize 1M
    create 0664 root utmp
    rotate 1
}

# system-specific logs may be also be configured here.