rsyslogd

1. 查看rsyslog服務是否啟動？
   

   [root@deyu ~]# ps aux | grep rsyslog
   root      1736  0.0  0.0 248588  1448 ?        Sl   19:51   0:00 /sbin/rsyslogd -c 4
   [root@deyu ~]# chkconfig --list rsyslog
   rsyslog        	0:off	1:off	2:on	3:on	4:on	5:on	6:off
   

2. rsyslog服務的設定檔
   

   [root@deyu ~]# cat /etc/rsyslog.conf 
   #### RULES ####
   
   # Log all kernel messages to the console.
   # Logging much else clutters up the screen.
   #kern.*                                                 /dev/console
   
   # Log anything (except mail) of level info or higher.
   # Don't log private authentication messages!
   *.info;mail.none;authpriv.none;cron.none                /var/log/messages
   
   # The authpriv file has restricted access.
   authpriv.*                                              /var/log/secure
   
   # Log all the mail messages in one place.
   mail.*                                                  -/var/log/maillog
       ## "-"表示先儲存在buffer，等資料量夠大才一次性寫入磁碟。
   # Log cron stuff
   cron.*                                                  /var/log/cron
   
   # Everybody gets emergency messages
   *.emerg                                                 *
       ## 產生最嚴重錯誤等級時，將訊息廣播給所有登入的帳號。
   # Save news errors of level crit and higher in a special file.
   uucp,news.crit                                          /var/log/spooler
   
   # Save boot messages also to boot.log
   local7.*                                                /var/log/boot.log
   

3. rsyslog.conf使用手冊
   

   [root@deyu ~]# man 5 rsyslog.conf