Syslog/zh

文章出处:

{{#if: | {{{2}}} | http://wiki.ubuntu.org.cn/Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices }}

翻译人员:

lipeng

点击翻译:

English {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/af |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Afrikaans| [[::Syslog/zh/af|Afrikaans]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/ar |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|العربية| [[::Syslog/zh/ar|العربية]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/az |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|azərbaycanca| [[::Syslog/zh/az|azərbaycanca]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/bcc |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|جهلسری بلوچی| [[::Syslog/zh/bcc|جهلسری بلوچی]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/bg |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|български| [[::Syslog/zh/bg|български]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/br |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|brezhoneg| [[::Syslog/zh/br|brezhoneg]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/ca |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|català| [[::Syslog/zh/ca|català]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/cs |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|čeština| [[::Syslog/zh/cs|čeština]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/de |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Deutsch| [[::Syslog/zh/de|Deutsch]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/el |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Ελληνικά| [[::Syslog/zh/el|Ελληνικά]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/es |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|español| [[::Syslog/zh/es|español]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/fa |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|فارسی| [[::Syslog/zh/fa|فارسی]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/fi |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|suomi| [[::Syslog/zh/fi|suomi]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/fr |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|français| [[::Syslog/zh/fr|français]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/gu |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|ગુજરાતી| [[::Syslog/zh/gu|ગુજરાતી]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/he |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|עברית| [[::Syslog/zh/he|עברית]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/hu |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|magyar| [[::Syslog/zh/hu|magyar]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/id |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Bahasa Indonesia| [[::Syslog/zh/id|Bahasa Indonesia]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/it |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|italiano| [[::Syslog/zh/it|italiano]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/ja |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|日本語| [[::Syslog/zh/ja|日本語]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/ko |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|한국어| [[::Syslog/zh/ko|한국어]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/ksh |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Ripoarisch| [[::Syslog/zh/ksh|Ripoarisch]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/mr |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|मराठी| [[::Syslog/zh/mr|मराठी]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/ms |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Bahasa Melayu| [[::Syslog/zh/ms|Bahasa Melayu]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/nl |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Nederlands| [[::Syslog/zh/nl|Nederlands]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/no |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|norsk| [[::Syslog/zh/no|norsk]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/oc |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|occitan| [[::Syslog/zh/oc|occitan]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/pl |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|polski| [[::Syslog/zh/pl|polski]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/pt |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|português| [[::Syslog/zh/pt|português]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/ro |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|română| [[::Syslog/zh/ro|română]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/ru |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|русский| [[::Syslog/zh/ru|русский]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/si |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|සිංහල| [[::Syslog/zh/si|සිංහල]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/sq |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|shqip| [[::Syslog/zh/sq|shqip]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/sr |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|српски / srpski| [[::Syslog/zh/sr|српски / srpski]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/sv |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|svenska| [[::Syslog/zh/sv|svenska]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/th |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|ไทย| [[::Syslog/zh/th|ไทย]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/tr |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Türkçe| [[::Syslog/zh/tr|Türkçe]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/vi |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Tiếng Việt| [[::Syslog/zh/vi|Tiếng Việt]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/yue |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|粵語| [[::Syslog/zh/yue|粵語]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/zh |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|中文| [[::Syslog/zh/zh|中文]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/zh-hans |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|中文（简体）| [[::Syslog/zh/zh-hans|中文（简体）]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/zh-hant |  • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|中文（繁體）| [[::Syslog/zh/zh-hant|中文（繁體）]]}}|}}

{{#ifeq:Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|:Syslog/zh|请不要直接编辑翻译本页，本页将定期与来源同步。}}

{{#ifexist: :Syslog/zh/zh | | {{#ifexist: Syslog/zh/zh | | {{#ifeq: {{#titleparts:Syslog/zh|1|-1|}} | zh | | }} }} }} {{#ifeq: {{#titleparts:Syslog/zh|1|-1|}} | zh | | }}

简介

系统日志将设备local0~7保留用做从远程服务器和网络设施接收登录信息。路由器、交换机、防火墙和负载平衡设备每个都使用不同的设备来记录日志，它们每个都有自己的日志文件，这样可以便于排除故障。下面的例子将会教您怎样为每种设备设置不同的日志记录文件。

如果您有一个大的数据中心，可能您会按上述建议停止将所有记录写入/var/log/messages。在下面的所有网络设备配置文件例子中，我们会登录到上一章节已设置好的远程linux登录服务器192.168.1.100。

Cisco 路由器

默认设置下，思科路由器使用默认设备local7将日志信息发送到它们的日志服务器。在此例子中不要设置此默认设备，记得设置路由器，使日志内容包含时间戳和loopback接口的源IP地址

service timestamps log datetime localtime
no logging console
no logging monitor
logging 192.168.1.100

运行CATOS的Catalyst CAT系列交换机

默认设置下，思科交换机也会通过设备local7将日志信息发送给它们的日志服务器。请不要改变该设置，这样路由器和交换机都会将日志写入同一文件

set logging server enable
set logging server 192.168.1.100
set logging level all 5
set logging server severity 6

Cisco本地导向器

本地导向器利用syslog输出命令来设置它们的日志记录设备和严重度。设置值应按格式FF.SS（设施.严重度），使用表IV-1中的数字定义：

Table IV-1 本地导向器的日志记录设备和严重度的数字定义

Facility	FF Value		Severity	SS Value
local 0	16		System unusable	0
local 1	17		Immediate action required	1
local 2	18		Critical condition	2
local 3	19		Error conditions	3
local 4	20		Warning conditions	4
local 5	21		Normal but significant conditions	5
local 6	22		Informational messages	6
local 7	23		Debugging messages	7

这个例子使用设备local4和表IV-1中的日志调试信息。

syslog output 20.7
no syslog console
syslog host 192.168.1.100

Cisco PIX 防火墙

PIX防火墙使用表IV.2的数字定义来决定它们的日志记录设备。

Table IV-2 Syslog Facility and Severity Numbering Scheme for PIX Firewalls

Facility	Logging Facility Command Value
local 0	16
local 1	17
local 2	18
local 3	19
local 4	20
local 5	21
local 6	22
local 7	23

此配置案例中，假设日志服务器连接到“inside”保护接口。它将日志信息发送到local3,严重度为5（通知），这个严重度由logging trap命令设置

logging on
logging standby
logging timestamp
logging trap notifications
logging facility 19
logging host inside 192.168.1.100

Cisco CSS11000 (Arrowpoints)

配置思科CSS11000系列负载均衡器的方法更直接。 您只需要用logging host命令指定一数字来代表日志设备，然后用logging subsystem命令来设置严重度。此例子中CSS11000的日志设备为local6,严重度为6（信息）

logging host 192.168.1.100 facility 6
set logging subsystem all info-6
logging commands enable

思科syslog.conf文件示例

#
# All LOCAL3 messages (debug and above) go to the firewall file ciscofw
#
local3.debug /var/log/cisco/ciscofw

#
# All LOCAL4 messages  (debug and above) go to the Local Director file ciscold
#
local4.debug /var/log/cisco/ciscold

#
# All LOCAL6 messages  (debug and above) go to the CSS file ciscocss
#
local6.debug /var/log/cisco/ciscocss

#
# All LOCAL7 messages  (debug and above) go to the ciscoacl
# This includes ACL logs which are logged at severity debug
#
local7.debug /var/log/cisco/ciscoacl

#
# LOCAL7 messages  (notice and above) go to the ciscoinfo
# This excludes ACL logs which are logged at severity debug
#
local7.notice /var/log/cisco/ciscoinfo