日志主机安装指南.doc

日志主机安装指南  补充修改：哈密瓜blog：/gyl4802959转自：/131276/56828 一．希望达到的目的? ?? ? 1．服务器日志集中存放到MySQL数据库中；? ?? ? 2．每天发送一封E-MAIL, 报告异常日志条目；? ?? ? 3．实时报告异常系统事件；? ?? ? 4．WEB界面查询日志；二．日志主机安装和配置各个软件的功能及交互图 2009-2-17 09:49 上传 下载附件 (57.04 KB) 1．安装syslog-ng:安装前准备：#yum -y install openssl*#rpm -qa|grep openssl openssl097a-0.9.7a-9.el5_2.1openssl-0.9.8b-10.el5_2.1openssl-devel-0.9.8b-10.el5_2.1openssl-perl-0.9.8b-10.el5_2.1 复制代码 安装glib：注：编译syslog-ng的时候会用到glib库，而系统自带的库版本太低所以要安装高的版本（抓狂 ：我用的syslog-ng是 3.0.1版本他只认glib-2.12.3，所以大家下载时不知道下载什么版本时先编译一下就知道了……）下载地址：/pub/gnome/sources/glib/#./configure --prefix=/usr make make install安装eventlog:??下载地址：/downloads/files/eventlog/0.2/# ./configure??--prefix=/usr/local/eventlog make make install安装 libol:? ???下载地址：/downloads/files/libol/# ./configure ?prefix=/usr/local/libol make make install安装 syslog-ng:??下载地址：/downloads/files/syslog-ng/sources/# export PKG_CONFIG_PATH=/usr/local/eventlog/lib/pkgconfig/# ./configure ?prefix=/usr/local/syslog-ng --with-libol=/usr/local/libol/bin# make make install配置 syslog-ng:??# vi /usr/local/syslog-ng/etc/syslog-ng/syslog-ng.conf ? ?? ???options {? ?? ?? ?? ? keep_hostname(yes);? ?? ?? ?? ? long_hostnames(off);? ?? ?? ?? ? sync(1);? ?? ?? ?? ? log_fifo_size(1024);? ?? ?? ?? ? create_dirs(yes);??# if a dir does not exist create it? ?? ?? ?? ? owner(root);? ?? ? # owner of created files? ?? ?? ?? ? group(root);? ?? ? # group of created files? ?? ?? ?? ? perm(0600);? ?? ???# permissions of created files? ?? ?? ?? ? dir_perm(0700);? ? # permissions of created dirs? ?? ?? ?? ? };source s_all {? ?? ?? ?? ? udp();? ?? ?? ?? ?? ?? ???# remote logs # arriving at 514/udp? ?? ?? ?? ? unix-stream(/dev/log);??# local system logs? ?? ?? ?? ? file(/proc/kmsg);? ?? ? # local kernel logs? ?? ?? ?? ? internal();? ?? ?? ?? ?? ?# internal syslog-ng logs? ?? ?? ?? ? };destination single-file {? ?? ?? ?? ???file(/var/log/syslog-ng/all-messages);? ?? ?? ?? ? };log {? ?? ???source(s_