系统日志和日志文件log

 

 

 

----------------------------------------------------------系统日志 message

tail -f /var/log/message*

 

 

 

----------------------------------------------------------系统日志配置文件/etc/syslog.conf
[root@kolvin log]# vim /etc/syslog.conf
# The authpriv file has restricted access.
authpriv.*                                              /var/log/secure
# Log all the mail messages in one place.
mail.*                                                  -/var/log/maillog
# Log cron stuff
cron.*                                                  /var/log/cron
# Everybody gets emergency messages
*.emerg                                                 *
# Save news errors of level crit and higher in a special file.
uucp,news.crit                                          /var/log/spooler
# Save boot messages also to boot.log
local7.*                                                /var/log/boot.log

 

 

 

 

----------------------------------------------------------特殊日志文件

/var/log/wtmp 包含用户登陆系统和退出系统的记录,以二进制形式保存

/var/log/lastlog类似wtmp ,以二进制形式保存

 

----------------------------------------------------------内核和启动日志

 

 

----------------------------------------------------------日志轮换工具logrotate

配置文件/etc/logrotate.conf

 /etc/logrotate.d/

 

ubuntu下也有savelog

 

----------------------------------------------------------系统事件的日志程序syslog

 

/var/log/syslog

/var/log/secure 系统安全日志

/var/log/wtmp 记录登陆者的数据

/var/log/lastlog 记录登陆时间

/var/log/dmesg  系统启动日志

dmesg | grep error

 

 

/var/log/cron crond日志