Syslog/zh
文章出处: |
{{#if: | {{{2}}} | http://wiki.ubuntu.org.cn/Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices }} |
点击翻译: |
English {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/af | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Afrikaans| [[::Syslog/zh/af|Afrikaans]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/ar | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|العربية| [[::Syslog/zh/ar|العربية]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/az | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|azərbaycanca| [[::Syslog/zh/az|azərbaycanca]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/bcc | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|جهلسری بلوچی| [[::Syslog/zh/bcc|جهلسری بلوچی]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/bg | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|български| [[::Syslog/zh/bg|български]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/br | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|brezhoneg| [[::Syslog/zh/br|brezhoneg]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/ca | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|català| [[::Syslog/zh/ca|català]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/cs | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|čeština| [[::Syslog/zh/cs|čeština]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/de | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Deutsch| [[::Syslog/zh/de|Deutsch]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/el | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Ελληνικά| [[::Syslog/zh/el|Ελληνικά]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/es | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|español| [[::Syslog/zh/es|español]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/fa | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|فارسی| [[::Syslog/zh/fa|فارسی]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/fi | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|suomi| [[::Syslog/zh/fi|suomi]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/fr | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|français| [[::Syslog/zh/fr|français]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/gu | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|ગુજરાતી| [[::Syslog/zh/gu|ગુજરાતી]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/he | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|עברית| [[::Syslog/zh/he|עברית]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/hu | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|magyar| [[::Syslog/zh/hu|magyar]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/id | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Bahasa Indonesia| [[::Syslog/zh/id|Bahasa Indonesia]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/it | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|italiano| [[::Syslog/zh/it|italiano]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/ja | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|日本語| [[::Syslog/zh/ja|日本語]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/ko | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|한국어| [[::Syslog/zh/ko|한국어]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/ksh | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Ripoarisch| [[::Syslog/zh/ksh|Ripoarisch]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/mr | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|मराठी| [[::Syslog/zh/mr|मराठी]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/ms | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Bahasa Melayu| [[::Syslog/zh/ms|Bahasa Melayu]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/nl | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Nederlands| [[::Syslog/zh/nl|Nederlands]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/no | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|norsk| [[::Syslog/zh/no|norsk]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/oc | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|occitan| [[::Syslog/zh/oc|occitan]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/pl | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|polski| [[::Syslog/zh/pl|polski]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/pt | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|português| [[::Syslog/zh/pt|português]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/ro | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|română| [[::Syslog/zh/ro|română]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/ru | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|русский| [[::Syslog/zh/ru|русский]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/si | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|සිංහල| [[::Syslog/zh/si|සිංහල]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/sq | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|shqip| [[::Syslog/zh/sq|shqip]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/sr | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|српски / srpski| [[::Syslog/zh/sr|српски / srpski]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/sv | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|svenska| [[::Syslog/zh/sv|svenska]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/th | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|ไทย| [[::Syslog/zh/th|ไทย]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/tr | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Türkçe| [[::Syslog/zh/tr|Türkçe]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/vi | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|Tiếng Việt| [[::Syslog/zh/vi|Tiếng Việt]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/yue | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|粵語| [[::Syslog/zh/yue|粵語]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/zh | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|中文| [[::Syslog/zh/zh|中文]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/zh-hans | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|中文(简体)| [[::Syslog/zh/zh-hans|中文(简体)]]}}|}} {{#ifexist: {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices | {{#if: | :}}Syslog/zh}}/zh-hant | • {{#if: Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|中文(繁體)| [[::Syslog/zh/zh-hant|中文(繁體)]]}}|}} |
{{#ifeq:Quick_HOWTO_:_Ap04_:_syslog_Configuration_and_Cisco_Devices|:Syslog/zh|请不要直接编辑翻译本页,本页将定期与来源同步。}} |
{{#ifexist: :Syslog/zh/zh | | {{#ifexist: Syslog/zh/zh | | {{#ifeq: {{#titleparts:Syslog/zh|1|-1|}} | zh | | }} }} }} {{#ifeq: {{#titleparts:Syslog/zh|1|-1|}} | zh | | }}
简介
系统日志命令syslog使用设备local0~7从远程服务器和网络设施接收日志记录信息。路由器、交换机、防火墙和负载均衡器都分别使用不同的设备来记录日志,它们都有自己的日志文件,这样可以便于故障排除。下面的例子将会教您怎样为每种设备设置不同的日志记录文件。
如果您有一个大的数据中心,可能您会按上述建议停止将所有记录写入/var/log/messages。在下面的所有网络设备配置文件例子中,我们会登录到上一章节已设置好的远程linux登录服务器192.168.1.100。
Cisco 路由器
默认设置下,思科路由器使用默认设备local7将日志信息发送到它们的日志服务器。在此例子中不要设置此默认设备,记得设置路由器,使日志内容包含时间戳和loopback接口的源IP地址
service timestamps log datetime localtime no logging console no logging monitor logging 192.168.1.100
运行CATOS的Catalyst CAT系列交换机
默认设置下,思科交换机也会通过设备local7将日志信息发送给它们的日志服务器。请不要改变该设置,这样路由器和交换机都会将日志写入同一文件
set logging server enable set logging server 192.168.1.100 set logging level all 5 set logging server severity 6
Cisco本地导向器
本地导向器利用syslog输出命令来设置它们的日志记录设备和严重度。设置值应按格式FF.SS(设施.严重度),使用表IV-1中的数字定义:
Table IV-1 本地导向器的日志记录设备和严重度的数字定义
Facility |
FF Value |
|
Severity |
SS Value |
local 0 |
16 |
|
System unusable |
0 |
local 1 |
17 |
|
Immediate action required |
1 |
local 2 |
18 |
|
Critical condition |
2 |
local 3 |
19 |
|
Error conditions |
3 |
local 4 |
20 |
|
Warning conditions |
4 |
local 5 |
21 |
|
Normal but significant conditions |
5 |
local 6 |
22 |
|
Informational messages |
6 |
local 7 |
23 |
|
Debugging messages |
7 |
这个例子使用设备local4和表IV-1中的日志调试信息。
syslog output 20.7 no syslog console syslog host 192.168.1.100
Cisco PIX 防火墙
PIX防火墙使用表IV.2的数字定义来决定它们的日志记录设备。
Table IV-2 PIX防火墙的日志记录设备和严重度的数字定义
Facility |
Logging Facility Command Value |
local 0 |
16 |
local 1 |
17 |
local 2 |
18 |
local 3 |
19 |
local 4 |
20 |
local 5 |
21 |
local 6 |
22 |
local 7 |
23 |
此配置案例中,假设日志服务器连接到“inside”保护接口。它将日志信息发送到local3,严重度为5(通知),这个严重度由logging trap命令设置
logging on logging standby logging timestamp logging trap notifications logging facility 19 logging host inside 192.168.1.100
Cisco CSS11000 (Arrowpoints)负载均衡器
配置思科CSS11000系列负载均衡器的方法更直接。 您只需要用logging host命令指定一数字来代表日志设备,然后用logging subsystem命令来设置严重度。此例子中CSS11000的日志设备为local6,严重度为6(信息)
logging host 192.168.1.100 facility 6 set logging subsystem all info-6 logging commands enable
思科syslog.conf文件示例
# # All LOCAL3 messages (debug and above) go to the firewall file ciscofw # local3.debug /var/log/cisco/ciscofw # # All LOCAL4 messages (debug and above) go to the Local Director file ciscold # local4.debug /var/log/cisco/ciscold # # All LOCAL6 messages (debug and above) go to the CSS file ciscocss # local6.debug /var/log/cisco/ciscocss # # All LOCAL7 messages (debug and above) go to the ciscoacl # This includes ACL logs which are logged at severity debug # local7.debug /var/log/cisco/ciscoacl # # LOCAL7 messages (notice and above) go to the ciscoinfo # This excludes ACL logs which are logged at severity debug # local7.notice /var/log/cisco/ciscoinfo