Questo contenuto non è disponibile nella lingua selezionata.
Chapter 25. Viewing and Managing Log Files
Log files are files that contain messages about the system, including the kernel, services, and applications running on it. There are different log files for different information. For example, there is a default system log file, a log file just for security messages, and a log file for cron tasks.
Log files can be very useful when trying to troubleshoot a problem with the system such as trying to load a kernel driver or when looking for unauthorized login attempts to the system. This chapter discusses where to find log files, how to view log files, and what to look for in log files.
Some log files are controlled by a daemon called
rsyslogd. The rsyslogd daemon is an enhanced replacement for previous sysklogd, and provides extended filtering, encryption protected relaying of messages, various configuration options, input and output modules, support for transportation via the TCP or UDP protocols. Note that rsyslog is compatible with sysklogd.
25.1. Installing rsyslog Copia collegamentoCollegamento copiato negli appunti!
Copia collegamentoCollegamento copiato negli appunti!
Version 5 of rsyslog, provided in the rsyslog package, is installed by default in Red Hat Enterprise Linux 6. If required, to ensure that it is, issue the following command as
Copy to Clipboard
Copied!
Toggle word wrap
Toggle overflow
root:
yum install rsyslog
~]# yum install rsyslog
Loaded plugins: product-id, refresh-packagekit, subscription-manager
Package rsyslog-5.8.10-10.el6_6.i686 already installed and latest version
Nothing to do
25.1.1. Upgrading to rsyslog version 7 Copia collegamentoCollegamento copiato negli appunti!
Copia collegamentoCollegamento copiato negli appunti!
Version 7 of rsyslog, provided in the rsyslog7 package, is available in Red Hat Enterprise Linux 6. It provides a number of enhancements over version 5, in particular higher processing performance and support for more plug-ins. If required, to change to version 7, make use of the
yum shell utility as described below.
Procedure 25.1. Upgrading to rsyslog 7
To upgrade from rsyslog version 5 to rsyslog version 7, it is necessary to install and remove the relevant packages simultaneously. This can be accomplished using the
yum shell utility.
- Enter the following command as
rootto start the yum shell:The yum shell prompt appears.yum shell
~]# yum shell Loaded plugins: product-id, refresh-packagekit, subscription-manager >Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Enter the following commands to install the rsyslog7 package and remove the rsyslog package.
> install rsyslog7 > remove rsyslog
> install rsyslog7 > remove rsyslogCopy to Clipboard Copied! Toggle word wrap Toggle overflow - Enter
runto start the process:Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Enter
ywhen prompted to start the upgrade. - When the upgrade is completed, the
yum shellprompt is displayed. Enterquitorexitto exit the shell:Finished Transaction > quit Leaving Shell ~]#
Finished Transaction > quit Leaving Shell ~]#Copy to Clipboard Copied! Toggle word wrap Toggle overflow
For information on using the new syntax provided by rsyslog version 7, see Section 25.4, “Using the New Configuration Format”.