rasp log-learning and syslog-ng

1可以用串口代替ssh连接

2是用静态ip的方法

https://blog.youkuaiyun.com/u013178472/article/details/78574878

3 logger会调用syslog机制

4 syslog-ng： vim /etc/syslog-ng/syslog-ng.conf

@version: 3.5
@include "scl.conf"
@include "`scl-root`/system/tty10.conf"

source test{
        udp(ip(0.0.0.0) port(514));
};

destination d_test{
        file("/var/tmp/D$YEAR-$MONTH-$DAY.log" owner(pi) group(pi) perm(0777) dir_perm(0777) create_dirs(yes));
};
#filter f_test{
#    level(debug);
#};

log {
    source(test);
#    filter(f_test);
    destination(d_test);
};

systemctl restart syslog-ng.service

重启这个服务，通过systemctl看这个服务起来了没

/usr/sbin/syslog-ng -F  强制启动，看下问题出在哪？

通过udp与syslog-ng交互，创建一个socket，把收到的消息都发出去，在config文件中，指定保存的文件；但这个Python只是发一个字符串，所以晒有一个调用脚本run_socket_log.sh

import socket
import sys
import traceback

def main():
    pass

def sendMSG(msg):
    try:
        sock =  socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
        sock.connect(('127.0.0.1',514))
        sock.sendall(msg)
        sock.close()
    except Exception,e:
        print traceback.print_exc(e)

if __name__ == '__main__':
    if len(sys.argv) < 2 :
        print "please input message"
    msg=sys.argv[1]
    sendMSG(msg)

 run_socket_log.sh

#! /bin/bash

#for((i=0; i<10; i++))
for i in `seq 1 100`
do
    value=`echo "$i" | md5sum`;val="$i--$value"; python ./socket_log.py $val
done

结果会在指定目录下，创建一个log，里面有一个100个。。。。。

Sep 14 02:12:11 localhost 1--b026324c6904b2a9cb4b88d6d61c81d1
Sep 14 02:12:11 localhost 2--26ab0db90d72e28ad0ba1e22ee510510
Sep 14 02:12:11 localhost 3--6d7fce9fee471194aa8b5b6e47267f03
Sep 14 02:12:11 localhost 4--48a24b70a0b376535542b996af517398
Sep 14 02:12:11 localhost 5--1dcca23355272056f04fe8bf20edfce0
Sep 14 02:12:11 localhost 6--9ae0ea9e3c9c6e1b9b6252c8395efdc1
Sep 14 02:12:11 localhost 7--84bc3da1b3e33a18e8d5e1bdd7a18d7a

主要参考：

http://genggeng.iteye.com/blog/1359887

note：config文件的权限，我改成0777，并不好！！！暂时