rsyslog 日志分析

《rsyslog 日志分析》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、一、搭建环境系统：centos6.5软件：lamp、rsyslog、rsyslog-mysql 、loganalyzerrsyslog用来收集远程服务器系统日志信息rsyslog-mysql是rsyslog连接数据库的模块loganalyzer用来分析系统日志二、软件安装a、httpd安装 tar -jxvf apr-1.5.1.tar.bz2 ./configure --prefix=/usr/local/aprmake && make installtar -zxvf apr-util-1.5.4.tar.gz  ./configure --prefix=/usr/

2、local/apr-util --with-apr=/usr/local/apr/make && make installtar -zxvf httpd-2.4.12.tar.gz yum install -y pcre-devel zlib-devel openssl-devel ./configure  --prefix=/data/program/apache2 --enable-so --enable-rewrite --enable-ssl --enable-cgi --enable-cgid --enable-modules=most --enable-mo

3、ds-shared=most --enable-mpms-share=all --with-apr=/usr/local/apr --with-apr-util=/usr/local/apr-util --enable-deflatemake -j 6 && make install++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++修改httpd配置文件，添加如下两行AddType application/x-httpd-php .phpAddType application/x-httpd-

4、php-source .phps定位至DirectoryIndex  index.htmDirectoryIndex  index.php  index.html注释掉主服务的站点目录#DocumentRoot "/data/program/apache2/htdocs"开启虚拟主机需要加载Include conf/extra/httpd-vhosts.confLoadModule log_config_module modules/mod_log_config.so添加虚拟主机    DirectoryIndex  index.ph

5、p  index.htm    ServerAdmin syslog.ana.com    DocumentRoot "/data/program/apache2/htdocs/"    ServerName syslog.ana.com    ErrorLog "logs/syslog-error_log"    CustomLog "logs/syslog-access_log" common添加httpd及mysql的路径环境变量vi /etc/profile.d/path.shPAHT=$PATH:/data/program/mysq

6、l5/bin:/data/program/apache/binsource /etc/sourcehttpd -k start----------------------------------------------------------------------b、mysql5.5安装groupadd -r mysqluseradd -g mysql -r -d /data/mydata mysqlyum install cmaketar xf mysql-5.5.25.tar.gz cd mysql-5.5.25cmake . -DCMAKE_INSTALL_PR

7、EFIX=/data/program/mysql5 -DMYSQL_DATADIR=/mydata/data -DSYSCONFDIR=/etc -DWITH_INNOBASE_STORAGE_ENGINE=1 -DWITH_ARCHIVE_STORAGE_ENGINE=1 -DWITH_BLACKHOLE_STORAGE_ENGINE=1 -DWITH_READLINE=1 -DWITH_SSL=system -DWITH_ZLIB=system -DWITH_LIBWRAP=0 -DMYSQL_UNIX_ADDR=/tmp/mysql