日志系统Rsyslog 7.4.8发布.2013-01-09 上个版本是2013-12-11的7.4.7。这是一个Bug修正版。增强了错误信息处理和2个Bug.其他产品系列是7.2.7 6.6.0 6.4.2 5.10.1 开发版7.5.8和8.1.3,现在Rsyslogd基本是syslogd的标准了。
完全改进:
Version 7.4.8 [v7.4-stable] 2014-01-08
rsgtutil provides better error messages on unfinished signature blocks
bugfix: guard against control characters in internal (error) messages
Thanks to Ahto Truu for alerting us.bugfix: immark did emit messages under kern.=info instead of syslog.=info
Note that his can potentially break exisiting configurations that rely on immark sending as kern.=info. Unfortunately, we cannot leave this unfixed as we never should emit messages under the kern facilit
下载:http://www.rsyslog.com/files/download/rsyslog/rsyslog-7.4.8.tar.gz
rsyslog只负责记录系统相关日志,比如上面提到的/var/log/syslog等,在/etc/rsyslog.d/50-default.conf有定义。
X的日志并不由rsyslog生成,用lsof查看可见是由Xorg(/usr/bin/X)生成:
sudo lsof /var/log/Xorg.0.log
另外Nginx等的日志也是自己生成的。
用于日志归档的logrotate不是守护进程,是一个crontab定时任务,rsyslog要使用logrotate归档日志,就需要写一个任务到/etc/logrotate.d/下,比如:
/etc/logrotate.d/rsyslog