微信公众号搜"智元新知"关注
微信扫一扫可直接关注哦!

在rsyslog中用docker写找不到

如何解决在rsyslog中用docker写找不到

我正在尝试通过控制台在具有TCP 514端口的rsyslog中进行写入,但是该命令未在var / log / messages中进行写入。

这是我的 rsyslog.conf

 # provides TCP syslog reception
 $ModLoad imtcp
 $InputTcpserverRun 514

 # Use Traditional timestamp format.
 # To enable high precision timestamps,comment out the following line.
 $ActionFileDefaultTemplate RSYSLOG_SyslogProtocol23Format

 # Filter duplicated messages
 $RepeatedMsgReduction on

 # Set the default permissions for all log files.
 $FileOwner syslog
 $FileGroup adm
 $FileCreateMode 0640
 $DirCreateMode 0755
 $Umask 0022
 $PrivDropToUser syslog
 $PrivDropToGroup syslog

 #
 *.*
          /var/log/Traditionalfile.log;

 template(name="RSYSLOG_SyslogProtocol23Format" type="string"
          string="<%PRI%>1 %TIMESTAMP:::date-rfc3339% %HOSTNAME% %APP-NAME% %PROCID% %MsgiD% %sTRUCTURED-DATA% %msg%\n"
    )

 # Where to place spool and state files
 $workdirectory /var/spool/rsyslog
 
 # Log anything (except mail) of level info or higher.
 # Don't log private authentication messages!
 *.info;mail.none;authpriv.none         /var/log/messages

 # The authpriv file has restricted access.
 authpriv.*                             /var/log/secure

 # Log all the mail messages in one place.
 mail.*                                 /var/log/maillog

 #For a start,use this simplified approach.
 *.*                                     /var/log/messages

这是我的dockerfile

FROM picoded/ubuntu-openjdk-8-jdk:14.04
RUN apt-get install rsyslog -y
copY docker-syslog/rsyslog.conf etc/rsyslog.conf
# sudo service rsyslog restart -> i run this command manually

如果我运行 rsyslogd -N1

 rsyslogd: version 7.4.4,config validation run (level 1),master config /etc/rsyslog.conf
 rsyslogd: End of config validation run. Bye.

这是var / log / messages中的内容

 <46>1 2020-10-28T22:27:02.607988+00:00 4089ab4ec9ab rsyslogd - - -  [origin software="rsyslogd" swVersion="7.4.4" x-pid="389" x-info="http://www.rsyslog.com"] start
 <46>1 2020-10-28T22:27:02.607809+00:00 4089ab4ec9ab rsyslogd - - - rsyslogd's groupid changed to 104
 <46>1 2020-10-28T22:27:02.607910+00:00 4089ab4ec9ab rsyslogd - - - rsyslogd's userid changed to 101

使用此命令,我在rsyslog中编写:

 logger -p local0.warn -d -n 127.0.0.1 "test message to catchall" -u /ignore/socket

欢迎所有想法。

版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。