Ci-dessous, les différences entre deux révisions de la page.
| Les deux révisions précédentes Révision précédente Prochaine révision | Révision précédente | ||
|
anthony_messe:banana_pi:logs_des_connexions [2018/05/28 13:50] Anthony Messé |
anthony_messe:banana_pi:logs_des_connexions [2018/06/14 13:01] (Version actuelle) Anthony Messé |
||
|---|---|---|---|
| Ligne 23: | Ligne 23: | ||
| module(load="omrelp") | module(load="omrelp") | ||
| #On log avec le protocole relp vers une adresse et un port précis | #On log avec le protocole relp vers une adresse et un port précis | ||
| - | action(type="omrelp" target="192.168.16.11" port="20514" tls="off") | + | action(type="omrelp" target="192.168.16.11" port="20514" tls="on") |
| </code> | </code> | ||
| Ligne 31: | Ligne 31: | ||
| <code> | <code> | ||
| - | # /etc/rsyslog.conf Configuration file for rsyslog. | ||
| - | # | ||
| - | # For more information see | ||
| - | # /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html | ||
| - | |||
| - | |||
| - | ################# | ||
| - | #### MODULES #### | ||
| - | ################# | ||
| - | |||
| module(load="imuxsock") # provides support for local system logging | module(load="imuxsock") # provides support for local system logging | ||
| module(load="imklog") # provides kernel logging support | module(load="imklog") # provides kernel logging support | ||
| - | #module(load="immark") # provides --MARK-- message capability | ||
| - | # provides UDP syslog reception | ||
| - | #module(load="imudp") | ||
| - | #input(type="imudp" port="514") | ||
| - | |||
| - | # provides TCP syslog reception | ||
| - | #module(load="imtcp") | ||
| - | #input(type="imtcp" port="514") | ||
| - | |||
| - | |||
| - | ########################### | ||
| - | #### GLOBAL DIRECTIVES #### | ||
| - | ########################### | ||
| - | |||
| - | # | ||
| # Use traditional timestamp format. | # Use traditional timestamp format. | ||
| - | # To enable high precision timestamps, comment out the following line. | ||
| - | # | ||
| $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat | $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat | ||
| - | # | ||
| # Set the default permissions for all log files. | # Set the default permissions for all log files. | ||
| - | # | ||
| $FileOwner root | $FileOwner root | ||
| $FileGroup adm | $FileGroup adm | ||
| Ligne 73: | Ligne 44: | ||
| $Umask 0022 | $Umask 0022 | ||
| - | # | ||
| # Where to place spool and state files | # Where to place spool and state files | ||
| - | # | ||
| $WorkDirectory /var/spool/rsyslog | $WorkDirectory /var/spool/rsyslog | ||
| - | |||
| - | # | ||
| - | # Include all config files in /etc/rsyslog.d/ | ||
| - | # | ||
| - | $IncludeConfig /etc/rsyslog.d/*.conf | ||
| - | |||
| - | |||
| - | ############### | ||
| - | #### RULES #### | ||
| - | ############### | ||
| - | # | ||
| - | # First some standard log files. Log by facility. | ||
| - | # | ||
| - | auth,authpriv.* /var/log/auth.log | ||
| - | *.*;auth,authpriv.none -/var/log/syslog | ||
| - | #cron.* /var/log/cron.log | ||
| - | daemon.* -/var/log/daemon.log | ||
| - | kern.* -/var/log/kern.log | ||
| - | lpr.* -/var/log/lpr.log | ||
| - | mail.* -/var/log/mail.log | ||
| - | user.* -/var/log/user.log | ||
| - | |||
| - | # | ||
| - | # Logging for the mail system. Split it up so that | ||
| - | # it is easy to write scripts to parse these files. | ||
| - | # | ||
| - | mail.info -/var/log/mail.info | ||
| - | mail.warn -/var/log/mail.warn | ||
| - | mail.err /var/log/mail.err | ||
| - | |||
| - | # | ||
| - | # Some "catch-all" log files. | ||
| - | # | ||
| - | *.=debug;\ | ||
| - | auth,authpriv.none;\ | ||
| - | news.none;mail.none -/var/log/debug | ||
| - | *.=info;*.=notice;*.=warn;\ | ||
| - | auth,authpriv.none;\ | ||
| - | cron,daemon.none;\ | ||
| - | mail,news.none -/var/log/messages | ||
| - | |||
| - | # | ||
| - | # Emergencies are sent to everybody logged in. | ||
| - | # | ||
| - | *.emerg :omusrmsg:* | ||
| #On charge le module relp (output) | #On charge le module relp (output) | ||
| module(load="omrelp") | module(load="omrelp") | ||
| #On log avec le protocole relp vers une adresse et un port précis | #On log avec le protocole relp vers une adresse et un port précis | ||
| - | action(type="omrelp" target="192.168.16.11" port="20514" tls="off") | + | action(type="omrelp" target="192.168.16.11" port="20514" tls="on") |
| </code> | </code> | ||
| On redémarre rsyslog et on vérifie son état | On redémarre rsyslog et on vérifie son état | ||
| - | /etc/init.d/rsyslog restart && /etc/init.d/rsyslog status | + | systemctl restart rsyslog && systemctl status rsyslog |
| ===== Configuration du serveur ===== | ===== Configuration du serveur ===== | ||
| Ligne 161: | Ligne 85: | ||
| <code> | <code> | ||
| - | # /etc/rsyslog.conf Configuration file for rsyslog. | ||
| - | # | ||
| - | # For more information see | ||
| - | # /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html | ||
| - | |||
| - | |||
| - | ################# | ||
| - | #### MODULES #### | ||
| - | ################# | ||
| - | |||
| module(load="imuxsock") # provides support for local system logging | module(load="imuxsock") # provides support for local system logging | ||
| module(load="imklog") # provides kernel logging support | module(load="imklog") # provides kernel logging support | ||
| - | #module(load="immark") # provides --MARK-- message capability | ||
| - | # provides UDP syslog reception | ||
| - | #module(load="imudp") | ||
| - | #input(type="imudp" port="514") | ||
| - | |||
| - | # provides TCP syslog reception | ||
| - | #module(load="imtcp") | ||
| - | #input(type="imtcp" port="514") | ||
| - | |||
| - | |||
| - | ########################### | ||
| - | #### GLOBAL DIRECTIVES #### | ||
| - | ########################### | ||
| - | |||
| - | # | ||
| # Use traditional timestamp format. | # Use traditional timestamp format. | ||
| - | # To enable high precision timestamps, comment out the following line. | ||
| - | # | ||
| $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat | $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat | ||
| - | # | ||
| # Set the default permissions for all log files. | # Set the default permissions for all log files. | ||
| - | # | ||
| $FileOwner root | $FileOwner root | ||
| $FileGroup adm | $FileGroup adm | ||
| Ligne 203: | Ligne 98: | ||
| $Umask 0022 | $Umask 0022 | ||
| - | # | ||
| # Where to place spool and state files | # Where to place spool and state files | ||
| - | # | ||
| $WorkDirectory /var/spool/rsyslog | $WorkDirectory /var/spool/rsyslog | ||
| - | # | ||
| - | # Include all config files in /etc/rsyslog.d/ | ||
| - | # | ||
| - | $IncludeConfig /etc/rsyslog.d/*.conf | ||
| - | |||
| - | |||
| - | ############### | ||
| - | #### RULES #### | ||
| - | ############### | ||
| # | # | ||
| # First some standard log files. Log by facility. | # First some standard log files. Log by facility. | ||
| Ligne 228: | Ligne 112: | ||
| mail.* -/var/log/mail.log | mail.* -/var/log/mail.log | ||
| user.* -/var/log/user.log | user.* -/var/log/user.log | ||
| - | |||
| - | # | ||
| - | # Logging for the mail system. Split it up so that | ||
| - | # it is easy to write scripts to parse these files. | ||
| - | # | ||
| - | mail.info -/var/log/mail.info | ||
| - | mail.warn -/var/log/mail.warn | ||
| - | mail.err /var/log/mail.err | ||
| - | |||
| - | # | ||
| - | # Some "catch-all" log files. | ||
| - | # | ||
| - | *.=debug;\ | ||
| - | auth,authpriv.none;\ | ||
| - | news.none;mail.none -/var/log/debug | ||
| - | *.=info;*.=notice;*.=warn;\ | ||
| - | auth,authpriv.none;\ | ||
| - | cron,daemon.none;\ | ||
| - | mail,news.none -/var/log/messages | ||
| # | # | ||
| Ligne 277: | Ligne 142: | ||
| rotate 365 | rotate 365 | ||
| compress | compress | ||
| + | dateformat %Y-%m-%d | ||
| } | } | ||
| </code> | </code> | ||
| Ligne 282: | Ligne 148: | ||
| ===== Ressources ===== | ===== Ressources ===== | ||
| - | * https://access.redhat.com/solutions/70465 | + | * |