{"id":1532,"date":"2019-07-30T10:34:00","date_gmt":"2019-07-30T02:34:00","guid":{"rendered":"https:\/\/www.strongd.net\/?p=1532"},"modified":"2019-07-30T10:34:00","modified_gmt":"2019-07-30T02:34:00","slug":"18-4-systemd-journald-service-%e7%b0%a1%e4%bb%8b","status":"publish","type":"post","link":"https:\/\/www.strongd.net\/?p=1532","title":{"rendered":"18.4 systemd-journald.service \u7c21\u4ecb"},"content":{"rendered":"<p class=\"comments-section\"><span>\u904e\u53bb\u53ea\u6709rsyslogd \u7684\u5e74\u4ee3\u4e2d\uff0c\u7531\u65bcrsyslogd \u5fc5\u9808\u8981\u958b\u6a5f\u5b8c\u6210\u4e26\u4e14\u57f7\u884c\u4e86rsyslogd \u9019\u500bdaemon \u4e4b\u5f8c\uff0c\u767b\u9304\u6587\u4ef6\u624d\u6703\u958b\u59cb\u8a18\u9304\u3002\u6240\u4ee5\uff0c\u6838\u5fc3\u9084\u5f97\u8981\u81ea\u5df1\u7522\u751f\u4e00\u500bklogd \u7684\u670d\u52d9\uff0c \u624d\u80fd\u5c07\u7cfb\u7d71\u5728\u958b\u6a5f\u904e\u7a0b\u3001\u555f\u52d5\u670d\u52d9\u7684\u904e\u7a0b\u4e2d\u7684\u4fe1\u606f\u8a18\u9304\u4e0b\u4f86\uff0c\u7136\u5f8c\u7b49rsyslogd \u555f\u52d5\u5f8c\u624d\u50b3\u9001\u7d66\u5b83\u4f86\u8655\u7406\uff5e<\/span><\/p>\n<p class=\"comments-section\"><span>\u73fe\u5728\u6709\u4e86systemd \u4e4b\u5f8c\uff0c\u7531\u65bc\u9019\u73a9\u610f\u5152\u662f\u6838\u5fc3\u559a\u9192\u7684\uff0c\u7136\u5f8c\u53c8\u662f\u7b2c\u4e00\u652f\u57f7\u884c\u7684\u8edf\u4ef6\uff0c\u5b83\u53ef\u4ee5\u4e3b\u52d5\u8abf\u7528systemd-journald \u4f86\u5354\u52a9\u8a18\u8f09\u767b\u9304\u6587\u4ef6\uff5e \u56e0\u6b64\u5728\u958b\u6a5f\u904e\u7a0b\u4e2d\u7684\u6240\u6709\u4fe1\u606f\uff0c\u5305\u62ec\u555f\u52d5\u670d\u52d9\u8207\u670d\u52d9\u82e5\u555f\u52d5\u5931\u6557\u7684\u60c5\u6cc1\u7b49\u7b49\uff0c\u90fd\u53ef\u4ee5\u76f4\u63a5\u88ab\u8a18\u9304\u5230systemd-journald \u88e1\u982d\u53bb\uff01<\/span><\/p>\n<p class=\"comments-section\"><span>\u4e0d\u904esystemd-journald \u7531\u65bc\u662f\u4f7f\u7528\u65bc\u5167\u5b58\u7684\u767b\u9304\u6587\u4ef6\u8a18\u9304\u65b9\u5f0f\uff0c\u56e0\u6b64\u91cd\u65b0\u958b\u6a5f\u904e\u5f8c\uff0c\u958b\u6a5f\u524d\u7684\u767b\u9304\u6587\u4ef6\u4fe1\u606f\u7576\u7136\u5c31\u4e0d\u6703\u88ab\u8a18\u8f09\u4e86\u3002\u70ba\u6b64\uff0c\u6211\u5011\u9084\u662f\u5efa\u8b70\u555f\u52d5rsyslogd \u4f86\u5354\u52a9\u5206\u985e\u8a18\u9304\uff01\u4e5f\u5c31\u662f\u8aaa\uff0c systemd-journald \u7528\u4f86\u7ba1\u7406\u8207\u67e5\u8a62\u9019\u6b21\u958b\u6a5f\u5f8c\u7684\u767b\u9304\u4fe1\u606f\uff0c\u800crsyslogd \u53ef\u4ee5\u7528\u4f86\u8a18\u9304\u4ee5\u524d\u53ca\u73fe\u5728\u7684\u6240\u4ee5\u6578\u64da\u5230\u78c1\u76e4\u6587\u4ef6\u4e2d\uff0c\u65b9\u4fbf\u672a\u4f86\u9032\u884c\u67e5\u8a62\u5594\uff01<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"comments-section\"><strong><span>Tips<\/span><\/strong><span>\u96d6\u7136systemd-journald\u6240\u8a18\u9304\u7684\u6578\u64da\u5176\u5be6\u662f\u5728\u5167\u5b58\u4e2d\uff0c\u4f46\u662f\u7cfb\u7d71\u9084\u662f\u5229\u7528\u6587\u4ef6\u7684\u578b\u614b\u5c07\u5b83\u8a18\u9304\u5230\/run\/log\/\u4e0b\u9762\uff01\u4e0d\u904e\u6211\u5011\u5f9e\u524d\u9762\u5e7e\u7ae0\u4e5f\u77e5\u9053\uff0c \/run\u5728CentOS 7\u5176\u5be6\u662f\u5167\u5b58\u5167\u7684\u6578\u64da\uff0c\u6240\u4ee5\u91cd\u65b0\u958b\u6a5f\u904e\u5f8c\uff0c\u9019\u500b\/run\/log\u4e0b\u9762\u7684\u6578\u64da\u7576\u7136\u5c31\u88ab\u5237\u65b0\uff0c\u820a\u7684\u7576\u7136\u5c31\u4e0d\u518d\u5b58\u5728\u4e86\uff01<\/span><\/p>\n<h3 id=\"1841-\u4f7f\u7528-journalctl-\u89c2\u5bdf\u767b\u5f55\u4fe1\u606f\"><span>18.4.1 \u4f7f\u7528journalctl \u89c0\u5bdf\u767b\u9304\u4fe1\u606f<\/span><\/h3>\n<p class=\"comments-section\"><span>\u90a3\u9ebcsystemd-journald.service \u7684\u6578\u64da\u8981\u5982\u4f55\u53eb\u51fa\u4f86\u67e5\u95b1\u5462\uff1f\u5f88\u7c21\u55ae\uff01\u5c31\u901a\u904ejournalctl \u5373\u53ef\uff01\u8b93\u6211\u5011\u4f86\u77a7\u77a7\u9019\u500b\u6307\u4ee4\u53ef\u4ee5\u505a\u4e9b\u4ec0\u9ebc\u4e8b\uff1f<\/span><\/p>\n<pre><code>[root@study ~]# journalctl [-nrpf] [--since TIME] [--until TIME] _optional\r\n\u9009\u9879\u4e0e\u53c2\u6570\uff1a\r\n\u9ed8\u8ba4\u4f1a\u79c0\u51fa\u5168\u90e8\u7684 log \u5185\u5bb9\uff0c\u4ece\u65e7\u7684\u8f93\u51fa\u5230\u6700\u65b0\u7684\u8baf\u606f\r\n-n  \uff1a\u79c0\u51fa\u6700\u8fd1\u7684\u51e0\u884c\u7684\u610f\u601d\uff5e\u627e\u6700\u65b0\u7684\u4fe1\u606f\u76f8\u5f53\u6709\u7528\r\n-r  \uff1a\u53cd\u5411\u8f93\u51fa\uff0c\u4ece\u6700\u65b0\u7684\u8f93\u51fa\u5230\u6700\u65e7\u7684\u6570\u636e\r\n-p  \uff1a\u79c0\u51fa\u540e\u9762\u6240\u63a5\u7684\u8baf\u606f\u91cd\u8981\u6027\u6392\u5e8f\uff01\u8bf7\u53c2\u8003\u524d\u4e00\u5c0f\u8282\u7684 rsyslogd \u4fe1\u606f\r\n-f  \uff1a\u7c7b\u4f3c tail -f \u7684\u529f\u80fd\uff0c\u6301\u7eed\u663e\u793a journal \u65e5\u5fd7\u7684\u5185\u5bb9\uff08\u5b9e\u65f6\u76d1\u6d4b\u65f6\u76f8\u5f53\u6709\u5e2e\u52a9\uff01\uff09\r\n--since --until\uff1a\u8bbe\u7f6e\u5f00\u59cb\u4e0e\u7ed3\u675f\u7684\u65f6\u95f4\uff0c\u8ba9\u5728\u8be5\u671f\u95f4\u7684\u6570\u636e\u8f93\u51fa\u800c\u5df2\r\n_SYSTEMD_UNIT=unit.service \uff1a\u53ea\u8f93\u51fa unit.service \u7684\u4fe1\u606f\u800c\u5df2\r\n_COMM=bash \uff1a\u53ea\u8f93\u51fa\u4e0e bash \u6709\u5173\u7684\u4fe1\u606f\r\n_PID=pid   \uff1a\u53ea\u8f93\u51fa PID \u53f7\u7801\u7684\u4fe1\u606f\r\n_UID=uid   \uff1a\u53ea\u8f93\u51fa UID \u4e3a uid \u7684\u4fe1\u606f\r\nSYSLOG_FACILITY=[0-23] \uff1a\u4f7f\u7528 syslog.h \u89c4\u8303\u7684\u670d\u52a1\u76f8\u5bf9\u5e8f\u53f7\u6765\u8c03\u7528\u51fa\u6b63\u786e\u7684\u6570\u636e\uff01\r\n\r\n\u8303\u4f8b\u4e00\uff1a\u79c0\u51fa\u76ee\u524d\u7cfb\u7edf\u4e2d\u6240\u6709\u7684 journal \u65e5\u5fd7\u6570\u636e\r\n[root@study ~]# journalctl\r\n-- Logs begin at Mon 2015-08-17 18:37:52 CST, end at Wed 2015-08-19 00:01:01 CST. --\r\nAug 17 18:37:52 study.centos.vbird systemd-journal[105]: Runtime journal is using 8.0M \uff08max \r\n 142.4M, leaving 213.6M of free 1.3G, current limit 142.4M\uff09.\r\nAug 17 18:37:52 study.centos.vbird systemd-journal[105]: Runtime journal is using 8.0M \uff08max\r\n 142.4M, leaving 213.6M of free 1.3G, current limit 142.4M\uff09.\r\nAug 17 18:37:52 study.centos.vbird kernel: Initializing cgroup subsys cpuset\r\nAug 17 18:37:52 study.centos.vbird kernel: Initializing cgroup subsys cpu\r\n.....\uff08\u4e2d\u95f4\u7701\u7565\uff09.....\r\nAug 19 00:01:01 study.centos.vbird run-parts\uff08\/etc\/cron.hourly\uff09[19268]: finished 0anacron\r\nAug 19 00:01:01 study.centos.vbird run-parts\uff08\/etc\/cron.hourly\uff09[19270]: starting 0yum-hourly.cron\r\nAug 19 00:01:01 study.centos.vbird run-parts\uff08\/etc\/cron.hourly\uff09[19274]: finished 0yum-hourly.cron\r\n# \u4ece\u8fd9\u6b21\u5f00\u673a\u4ee5\u6765\u7684\u6240\u6709\u6570\u636e\u90fd\u4f1a\u663e\u793a\u51fa\u6765\uff01\u901a\u8fc7 less \u4e00\u9875\u9875\u7ffb\u52a8\u7ed9\u7ba1\u7406\u5458\u67e5\u9605\uff01\u6570\u636e\u91cf\u76f8\u5f53\u5927\uff01\r\n\r\n\u8303\u4f8b\u4e8c\uff1a\uff081\uff09\u4ec5\u663e\u793a\u51fa 2015\/08\/18 \u6574\u5929\u4ee5\u53ca\uff082\uff09\u4ec5\u4eca\u5929\u53ca\uff083\uff09\u4ec5\u6628\u5929\u7684\u65e5\u5fd7\u6570\u636e\u5185\u5bb9\r\n[root@study ~]# journalctl --since \"2015-08-18 00:00:00\" --until \"2015-08-19 00:00:00\"\r\n[root@study ~]# journalctl --since today\r\n[root@study ~]# journalctl --since yesterday --until today\r\n\r\n\u8303\u4f8b\u4e09\uff1a\u53ea\u627e\u51fa crond.service \u7684\u6570\u636e\uff0c\u540c\u65f6\u53ea\u5217\u51fa\u6700\u65b0\u7684 10 \u7b14\u5373\u53ef\r\n[root@study ~]# journalctl _SYSTEMD_UNIT=crond.service -n 10\r\n\r\n\u8303\u4f8b\u56db\uff1a\u627e\u51fa su, login \u6267\u884c\u7684\u767b\u5f55\u6587\u4ef6\uff0c\u540c\u65f6\u53ea\u5217\u51fa\u6700\u65b0\u7684 10 \u7b14\u5373\u53ef\r\n[root@study ~]# journalctl _COMM=su _COMM=login -n 10\r\n\r\n\u8303\u4f8b\u4e94\uff1a\u627e\u51fa\u8baf\u606f\u4e25\u91cd\u7b49\u7ea7\u4e3a\u9519\u8bef \uff08error\uff09 \u7684\u8baf\u606f\uff01\r\n[root@study ~]# journalctl -p err\r\n\r\n\u8303\u4f8b\u516d\uff1a\u627e\u51fa\u8ddf\u767b\u5f55\u670d\u52a1 \uff08auth, authpriv\uff09 \u6709\u5173\u7684\u767b\u5f55\u6587\u4ef6\u8baf\u606f\r\n[root@study ~]# journalctl SYSLOG_FACILITY=4 SYSLOG_FACILITY=10\r\n# \u66f4\u591a\u5173\u4e8e syslog_facility \u7684\u6570\u636e\uff0c\u8bf7\u53c2\u8003 18.2.1 \u5c0f\u8282\u7684\u5185\u5bb9\u5570\uff01\r\n<\/code><\/pre>\n<p class=\"comments-section\"><span>\u57fa\u672c\u4e0a\uff0c\u6709journalctl \u5c31\u771f\u7684\u53ef\u4ee5\u641e\u5b9a\u4f60\u7684\u8a0a\u606f\u6578\u64da\u56c9\uff01\u5168\u90e8\u7684\u6578\u64da\u90fd\u5728\u9019\u88e1\u9762\u8036\uff5e\u518d\u4f86\u5047\u8a2d\u4e00\u4e0b\uff0c\u4f60\u60f3\u8981\u4e86\u89e3\u5230\u767b\u9304\u6587\u4ef6\u7684\u5be6\u6642\u8b8a\u5316\uff0c \u90a3\u53c8\u8a72\u5982\u4f55\u8655\u7f6e\u5462\uff1f\u73fe\u5728\uff0c\u8acb\u958b\u5169\u500b\u7d42\u7aef\u6a5f\uff0c\u8b93\u6211\u5011\u4f86\u8655\u7406\u8655\u7406\uff01<\/span><\/p>\n<pre><code># \u7b2c\u4e00\u53f7\u7ec8\u7aef\u673a\uff0c\u8bf7\u4f7f\u7528\u4e0b\u9762\u7684\u65b9\u5f0f\u6301\u7eed\u4fa6\u6d4b\u7cfb\u7edf\uff01\r\n[root@study ~]# journalctl -f\r\n# \u8fd9\u65f6\u7cfb\u7edf\u4f1a\u597d\u50cf\u5361\u4f4f\uff5e\u5176\u5b9e\u4e0d\u662f\u5361\u4f4f\u5566\uff01\u662f\u7c7b\u4f3c tail -f \u5728\u6301\u7eed\u7684\u663e\u793a\u767b\u5f55\u6587\u4ef6\u4fe1\u606f\u7684\uff01\r\n\r\n# \u7b2c\u4e8c\u53f7\u7ec8\u7aef\u673a\uff0c\u4f7f\u7528\u4e0b\u9762\u7684\u65b9\u5f0f\u968f\u4fbf\u53d1\u4e00\u5c01 email \u7ed9\u7cfb\u7edf\u4e0a\u7684\u5e10\u53f7\uff01\r\n[root@study ~]# echo \"testing\" &amp;#124; mail -s 'tset' dmtsai\r\n# \u8fd9\u65f6\uff0c\u4f60\u4f1a\u53d1\u73b0\u5230\u7b2c\u4e00\u53f7\u7ec8\u7aef\u673a\u7adf\u7136\u4e00\u76f4\u8f93\u51fa\u4e00\u4e9b\u8baf\u606f\u5427\uff01\u6ca1\u9519\uff01\u8fd9\u5c31\u5bf9\u4e86\uff01\r\n<\/code><\/pre>\n<p class=\"comments-section\"><span>\u5982\u679c\u4f60\u6709\u4e00\u4e9b\u5fc5\u9808\u8981\u5075\u6e2c\u7684\u884c\u70ba\uff0c\u53ef\u4ee5\u4f7f\u7528\u9019\u7a2e\u65b9\u5f0f\u4f86\u5be6\u6642\u4e86\u89e3\u5230\u7cfb\u7d71\u51fa\u73fe\u7684\u8a0a\u606f\uff5e\u800c\u53d6\u6d88journalctl -f \u7684\u65b9\u6cd5\uff0c\u5c31\u662f[crtl]+c \u554a\uff01<\/span><\/p>\n<h3 id=\"1842-logger-\u6307\u4ee4\u7684\u5e94\u7528\"><span>18.4.2 logger \u6307\u4ee4\u7684\u61c9\u7528<\/span><\/h3>\n<p class=\"comments-section\"><span>\u4e0a\u9762\u8ac7\u5230\u7684\u662f\u53eb\u51fa\u767b\u9304\u6587\u4ef6\u7d66\u6211\u5011\u67e5\u95b1\uff0c\u90a3\u63db\u500b\u89d2\u5ea6\u60f3\uff0c\u201c\u5982\u679c\u4f60\u60f3\u8981\u8b93\u4f60\u7684\u6578\u64da\u5132\u5b58\u5230\u767b\u9304\u6587\u4ef6\u7576\u4e2d\u201d\u5462\uff1f\u90a3\u8a72\u5982\u4f55\u662f\u597d\uff1f\u9019\u6642\u5c31\u5f97\u8981\u4f7f\u7528logger \u9019\u500b\u597d\u7528\u7684\u50a2\u4f19\u4e86\uff01\u9019\u500b\u50a2\u4f19\u53ef\u4ee5\u50b3\u8f38\u5f88\u591a\u4fe1\u606f\uff0c\u4e0d\u904e\uff0c\u6211\u5011\u53ea\u4f7f\u7528\u6700\u7c21\u55ae\u7684\u672c\u6a5f\u4fe1\u606f\u50b3\u905e\uff5e \u66f4\u591a\u7684\u7528\u6cd5\u5c31\u8acb\u60a8\u81ea\u884cman logger \u56c9\uff01<\/span><\/p>\n<pre><code>[root@study ~]# logger [-p \u670d\u52a1\u540d\u79f0.\u7b49\u7ea7] \"\u8baf\u606f\"\r\n\u9009\u9879\u4e0e\u53c2\u6570\uff1a\r\n\u670d\u52a1\u540d\u79f0.\u7b49\u7ea7 \uff1a\u8fd9\u4e2a\u9879\u76ee\u8bf7\u53c2\u8003 rsyslogd \u7684\u672c\u7ae0\u540e\u7eed\u5c0f\u8282\u7684\u4ecb\u7ecd\uff1b\r\n\r\n\u8303\u4f8b\u4e00\uff1a\u6307\u5b9a\u4e00\u4e0b\uff0c\u8ba9 dmtsai \u4f7f\u7528 logger \u6765\u4f20\u9001\u6570\u636e\u5230\u767b\u5f55\u6587\u4ef6\u5185\r\n[root@study ~]# logger -p user.info \"I will check logger command\"\r\n[root@study ~]# journalctl SYSLOG_FACILITY=1 -n 3\r\n-- Logs begin at Mon 2015-08-17 18:37:52 CST, end at Wed 2015-08-19 18:03:17 CST. --\r\nAug 19 18:01:01 study.centos.vbird run-parts\uff08\/etc\/cron.hourly\uff09[29710]: starting 0yum-hourly.cron\r\nAug 19 18:01:01 study.centos.vbird run-parts\uff08\/etc\/cron.hourly\uff09[29714]: finished 0yum-hourly.cron\r\nAug 19 18:03:17 study.centos.vbird dmtsai[29753]: I will check logger command\r\n<\/code><\/pre>\n<p class=\"comments-section\"><span>\u73fe\u5728\uff0c\u8b93\u6211\u5011\u4f86\u77a7\u4e00\u77a7\uff0c\u5982\u679c\u6211\u5011\u4e4b\u524d\u5beb\u7684backup.service \u670d\u52d9\u4e2d\uff0c\u5982\u679c\u4f7f\u7528\u624b\u52d5\u7684\u65b9\u5f0f\u4f86\u5099\u4efd\uff0c\u4ea6\u5373\u662f\u4f7f\u7528&#8221;\/backups\/backup.sh log&#8221; \u4f86\u57f7\u884c\u5099\u4efd\u6642\uff0c \u90a3\u9ebc\u5c31\u901a\u904elogger\u4f86\u8a18\u9304\u5099\u4efd\u7684\u958b\u59cb\u8207\u7d50\u675f\u7684\u6642\u9593\uff01\u8a72\u5982\u4f55\u662f\u597d\u5462\uff1f\u9019\u6a23\u4f5c\u770b\u770b\uff01<\/span><\/p>\n<pre><code>[root@study ~]# vim \/backups\/backup.sh\r\n#!\/bin\/bash\r\n\r\nif [ \"${1}\" == \"log\" ]; then\r\n        logger -p syslog.info \"backup.sh is starting\"\r\nfi\r\nsource=\"\/etc \/home \/root \/var\/lib \/var\/spool\/{cron,at,mail}\"\r\ntarget=\"\/backups\/backup-system-$\uff08date +%Y-%m-%d\uff09.tar.gz\"\r\n[ ! -d \/backups ] &amp;&amp; mkdir \/backups\r\ntar -zcvf ${target} ${source} &amp;&amp;gt; \/backups\/backup.log\r\nif [ \"${1}\" == \"log\" ]; then\r\n        logger -p syslog.info \"backup.sh is finished\"\r\nfi\r\n\r\n[root@study ~]# \/backups\/backup.sh log\r\n[root@study ~]# journalctl SYSLOG_FACILITY=5 -n 3\r\nAug 19 18:09:37 study.centos.vbird dmtsai[29850]: backup.sh is starting\r\nAug 19 18:09:54 study.centos.vbird dmtsai[29855]: backup.sh is finished\r\n<\/code><\/pre>\n<p class=\"comments-section\"><span>\u901a\u904e\u9019\u500b\u73a9\u610f\u5152\uff0c\u6211\u5011\u4e5f\u80fd\u5920\u5c07\u6578\u64da\u81ea\u884c\u8655\u7f6e\u5230\u767b\u9304\u6587\u4ef6\u7576\u4e2d\u56c9\uff01<\/span><\/p>\n<h3 id=\"1843-\u4fdd\u5b58-journal-\u7684\u65b9\u5f0f\"><span>18.4.3 \u4fdd\u5b58journal \u7684\u65b9\u5f0f<\/span><\/h3>\n<p class=\"comments-section\"><span>\u518d\u5f37\u8abf\u4e00\u6b21\uff0c\u9019\u500bsystemd-journald.servicd \u7684\u8a0a\u606f\u662f\u4e0d\u6703\u653e\u5230\u4e0b\u4e00\u6b21\u958b\u6a5f\u5f8c\u7684\uff0c\u6240\u4ee5\uff0c\u91cd\u65b0\u958b\u6a5f\u5f8c\uff0c\u90a3\u4e4b\u524d\u7684\u8a18\u9304\u901a\u901a\u6703\u907a\u5931\u3002\u96d6\u7136\u6211\u5011\u5927\u6982\u90fd\u6709\u555f\u52d5rsyslogd \u9019\u500b\u670d\u52d9\u4f86\u9032\u884c\u5f8c\u7e8c\u7684\u767b\u9304\u6587\u4ef6\u653e\u7f6e\uff0c\u4e0d\u904e\u5982\u679c\u4f60\u6bd4\u8f03\u559c\u6b61journalctl \u7684\u5b58\u53d6\u65b9\u5f0f\uff0c\u90a3\u9ebc\u53ef\u4ee5\u5c07\u9019\u4e9b\u6578\u64da\u5132\u5b58\u4e0b\u4f86\u5594\uff01<\/span><\/p>\n<p class=\"comments-section\"><span>\u57fa\u672c\u4e0a\uff0csystemd-journald.service \u7684\u914d\u7f6e\u6587\u4ef6\u4e3b\u8981\u53c3\u8003\/etc\/systemd\/journald.conf \u7684\u5167\u5bb9\uff0c\u8a73\u7d30\u7684\u53c3\u6578\u4f60\u53ef\u4ee5\u53c3\u8003man 5 journald.conf \u7684\u6578\u64da\u3002\u56e0\u70ba\u9ed8\u8a8d\u7684\u60c5\u6cc1\u4e0b\u9762\uff0c\u914d\u7f6e\u6587\u4ef6\u7684\u5167\u5bb9\u61c9\u8a72\u5df2\u7d93\u7b26\u5408\u6211\u5011\u7684\u9700\u6c42\uff0c\u6240\u4ee5\u9019\u908a\u9ce5\u54e5\u5c31\u4e0d\u518d\u4fee\u6539\u914d\u7f6e\u6587\u4ef6\u4e86\u3002\u53ea\u662f\u5982\u679c\u60f3\u8981\u4fdd\u5b58\u4f60\u7684journalctl \u6240\u8b80\u53d6\u7684\u767b\u9304\u6587\u4ef6\uff0c \u90a3\u9ebc\u5c31\u5f97\u8981\u5275\u5efa\u4e00\u500b\/var\/log\/journal \u7684\u76ee\u9304\uff0c\u4e26\u4e14\u8655\u7406\u4e00\u4e0b\u8a72\u76ee\u9304\u7684\u6b0a\u9650\uff0c\u90a3\u9ebc\u672a\u4f86\u91cd\u65b0\u555f\u52d5systemd-journald.service \u4e4b\u5f8c\uff0c \u65e5\u8a8c\u767b\u9304\u6587\u4ef6\u5c31\u6703\u4e3b\u52d5\u7684\u8907\u5236\u4e00\u4efd\u5230\/var\/log\/journal \u76ee\u9304\u4e0b\u56c9\uff01<\/span><\/p>\n<pre><code># 1\\. \u5148\u5904\u7406\u6240\u9700\u8981\u7684\u76ee\u5f55\u4e0e\u76f8\u5173\u6743\u9650\u8bbe\u7f6e\r\n[root@study ~]# mkdir \/var\/log\/journal\r\n[root@study ~]# chown root:systemd-journal \/var\/log\/journal\r\n[root@study ~]# chmod 2775 \/var\/log\/journal\r\n\r\n# 2\\. \u91cd\u65b0\u542f\u52a8 systemd-journald \u5e76\u4e14\u89c2\u5bdf\u5907\u4efd\u7684\u65e5\u5fd7\u6570\u636e\uff01\r\n[root@study ~]# systemctl restart systemd-journald.service\r\n[root@study ~]# ll \/var\/log\/journal\/\r\ndrwxr-sr-x. 2 root systemd-journal 27 Aug 20 02:37 309eb890d09f440681f596543d95ec7a\r\n<\/code><\/pre>\n<p class=\"comments-section\"><span>\u4f60\u5f97\u8981\u6ce8\u610f\u7684\u662f\uff0c\u56e0\u70ba\u73fe\u5728\u6574\u500b\u65e5\u8a8c\u767b\u9304\u6587\u4ef6\u7684\u5bb9\u91cf\u6703\u6301\u7e8c\u9577\u5927\uff0c\u56e0\u6b64\u4f60\u6700\u597d\u9084\u662f\u89c0\u5bdf\u4e00\u4e0b\u4f60\u4fc2\u7d71\u80fd\u7528\u7684\u7e3d\u5bb9\u91cf\u5594\uff01\u907f\u514d\u4e0d\u5c0f\u5fc3\u6587\u4ef6\u7cfb\u7d71\u7684\u5bb9\u91cf\u88ab\u704c\u7206\uff01\u6b64\u5916\uff0c\u672a\u4f86\u5728\/run\/log \u4e0b\u9762\u5c31\u6c92\u6709\u76f8\u95dc\u7684\u65e5\u8a8c\u53ef\u4ee5\u89c0\u5bdf\u4e86\uff01\u56e0\u70ba\u79fb\u52d5\u5230\/var\/log\/journal \u4e0b\u9762\u4f86\u56c9\uff01<\/span><\/p>\n<p class=\"comments-section\"><span>\u5176\u5be6\u9ce5\u54e5\u662f\u9019\u6a23\u60f3\u7684\uff0c\u65e2\u7136\u6211\u5011\u9084\u6709rsyslog.service \u4ee5\u53calogrotate \u7684\u5b58\u5728\uff0c\u56e0\u6b64\u9019\u500bsystemd-journald.service \u7522\u751f\u7684\u767b\u9304\u6587\u4ef6\uff0c \u500b\u4eba\u5efa\u8b70\u6700\u597d\u9084\u662f\u653e\u7f6e\u5230\/run\/log \u7684\u5167\u5b58\u7576\u4e2d\uff0c\u4ee5\u52a0\u5feb\u5b58\u53d6\u7684\u901f\u5ea6\uff01\u800c\u65e2\u7136rsyslog.service \u53ef\u4ee5\u5b58\u653e\u6211\u5011\u7684\u767b\u9304\u6587\u4ef6\uff0c \u4f3c\u4e4e\u4e5f\u6c92\u6709\u5fc5\u8981\u518d\u4fdd\u5b58\u4e00\u4efdjournal \u767b\u9304\u6587\u4ef6\u5230\u7cfb\u7d71\u7576\u4e2d\u5c31\u662f\u4e86\u3002\u55ae\u7d14\u7684\u5efa\u8b70\uff01\u5982\u4f55\u8655\u7406\uff0c\u4f9d\u7167\u60a8\u7684\u9700\u6c42\u5373\u53ef\u5594\uff01<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u904e\u53bb\u53ea\u6709rsyslogd \u7684\u5e74\u4ee3\u4e2d\uff0c\u7531\u65bcrsyslogd \u5fc5\u9808\u8981\u958b\u6a5f\u5b8c\u6210\u4e26\u4e14\u57f7\u884c\u4e86rsyslogd \u9019\u500bdaemon \u4e4b\u5f8c\uff0c\u767b\u9304\u6587\u4ef6\u624d\u6703\u958b\u59cb\u8a18\u9304\u3002\u6240\u4ee5\uff0c\u6838\u5fc3\u9084\u5f97\u8981\u81ea\u5df1\u7522\u751f\u4e00\u500bklogd \u7684\u670d\u52d9\uff0c \u624d\u80fd\u5c07\u7cfb\u7d71\u5728\u958b\u6a5f\u904e\u7a0b\u3001\u555f\u52d5\u670d\u52d9\u7684\u904e\u7a0b\u4e2d\u7684\u4fe1\u606f\u8a18\u9304\u4e0b\u4f86\uff0c\u7136\u5f8c\u7b49rsyslogd \u555f\u52d5\u5f8c\u624d\u50b3\u9001\u7d66\u5b83\u4f86\u8655\u7406\uff5e \u73fe\u5728\u6709\u4e86systemd \u4e4b\u5f8c\uff0c\u7531\u65bc\u9019\u73a9\u610f\u5152\u662f\u6838\u5fc3\u559a\u9192\u7684\uff0c\u7136\u5f8c\u53c8\u662f\u7b2c\u4e00\u652f\u57f7\u884c\u7684\u8edf\u4ef6\uff0c\u5b83\u53ef\u4ee5\u4e3b\u52d5\u8abf\u7528systemd-journald \u4f86\u5354\u52a9\u8a18\u8f09\u767b\u9304\u6587\u4ef6\uff5e \u56e0\u6b64\u5728\u958b\u6a5f\u904e\u7a0b\u4e2d\u7684\u6240\u6709\u4fe1\u606f\uff0c\u5305\u62ec\u555f\u52d5\u670d\u52d9\u8207\u670d\u52d9\u82e5\u555f\u52d5\u5931\u6557\u7684\u60c5\u6cc1\u7b49\u7b49\uff0c\u90fd\u53ef\u4ee5\u76f4\u63a5\u88ab\u8a18\u9304\u5230systemd-journald \u88e1\u982d\u53bb\uff01 \u4e0d\u904esystemd-journald \u7531\u65bc\u662f\u4f7f\u7528\u65bc\u5167\u5b58\u7684\u767b\u9304\u6587\u4ef6\u8a18\u9304\u65b9\u5f0f\uff0c\u56e0\u6b64\u91cd\u65b0\u958b\u6a5f\u904e\u5f8c\uff0c\u958b\u6a5f\u524d\u7684\u767b\u9304\u6587\u4ef6\u4fe1\u606f\u7576\u7136\u5c31\u4e0d\u6703\u88ab\u8a18\u8f09\u4e86\u3002\u70ba\u6b64\uff0c\u6211\u5011\u9084\u662f\u5efa\u8b70\u555f\u52d5rsyslogd \u4f86\u5354\u52a9\u5206\u985e\u8a18\u9304\uff01\u4e5f\u5c31\u662f\u8aaa\uff0c systemd-journald \u7528\u4f86\u7ba1\u7406\u8207\u67e5\u8a62\u9019\u6b21\u958b\u6a5f\u5f8c\u7684\u767b\u9304\u4fe1\u606f\uff0c\u800crsyslogd \u53ef\u4ee5\u7528\u4f86\u8a18\u9304\u4ee5\u524d\u53ca\u73fe\u5728\u7684\u6240\u4ee5\u6578\u64da\u5230\u78c1\u76e4\u6587\u4ef6\u4e2d\uff0c\u65b9\u4fbf\u672a\u4f86\u9032\u884c\u67e5\u8a62\u5594\uff01 &nbsp; Tips\u96d6\u7136systemd-journald\u6240\u8a18\u9304\u7684\u6578\u64da\u5176\u5be6\u662f\u5728\u5167\u5b58\u4e2d\uff0c\u4f46\u662f\u7cfb\u7d71\u9084\u662f\u5229\u7528\u6587\u4ef6\u7684\u578b\u614b\u5c07\u5b83\u8a18\u9304\u5230\/run\/log\/\u4e0b\u9762\uff01\u4e0d\u904e\u6211\u5011\u5f9e\u524d\u9762\u5e7e\u7ae0\u4e5f\u77e5\u9053\uff0c \/run\u5728CentOS 7\u5176\u5be6\u662f\u5167\u5b58\u5167\u7684\u6578\u64da\uff0c\u6240\u4ee5\u91cd\u65b0\u958b\u6a5f\u904e\u5f8c\uff0c\u9019\u500b\/run\/log\u4e0b\u9762\u7684\u6578\u64da\u7576\u7136\u5c31\u88ab\u5237\u65b0\uff0c\u820a\u7684\u7576\u7136\u5c31\u4e0d\u518d\u5b58\u5728\u4e86\uff01 18.4.1 \u4f7f\u7528journalctl \u89c0\u5bdf\u767b\u9304\u4fe1\u606f \u90a3\u9ebcsystemd-journald.service \u7684\u6578\u64da\u8981\u5982\u4f55\u53eb\u51fa\u4f86\u67e5\u95b1\u5462\uff1f\u5f88\u7c21\u55ae\uff01\u5c31\u901a\u904ejournalctl \u5373\u53ef\uff01\u8b93\u6211\u5011\u4f86\u77a7\u77a7\u9019\u500b\u6307\u4ee4\u53ef\u4ee5\u505a\u4e9b\u4ec0\u9ebc\u4e8b\uff1f [root@study ~]# journalctl [-nrpf] [&#8211;since TIME] [&#8211;until TIME] _optional \u9009\u9879\u4e0e\u53c2\u6570\uff1a \u9ed8\u8ba4\u4f1a\u79c0\u51fa\u5168\u90e8\u7684 log \u5185\u5bb9\uff0c\u4ece\u65e7\u7684\u8f93\u51fa\u5230\u6700\u65b0\u7684\u8baf\u606f -n \uff1a\u79c0\u51fa\u6700\u8fd1\u7684\u51e0\u884c\u7684\u610f\u601d\uff5e\u627e\u6700\u65b0\u7684\u4fe1\u606f\u76f8\u5f53\u6709\u7528 -r \uff1a\u53cd\u5411\u8f93\u51fa\uff0c\u4ece\u6700\u65b0\u7684\u8f93\u51fa\u5230\u6700\u65e7\u7684\u6570\u636e -p \uff1a\u79c0\u51fa\u540e\u9762\u6240\u63a5\u7684\u8baf\u606f\u91cd\u8981\u6027\u6392\u5e8f\uff01\u8bf7\u53c2\u8003\u524d\u4e00\u5c0f\u8282\u7684 rsyslogd \u4fe1\u606f -f \uff1a\u7c7b\u4f3c tail -f \u7684\u529f\u80fd\uff0c\u6301\u7eed\u663e\u793a &hellip; <a href=\"https:\/\/www.strongd.net\/?p=1532\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">18.4 systemd-journald.service \u7c21\u4ecb<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[21],"class_list":["post-1532","post","type-post","status-publish","format-standard","hentry","category-linux","tag-linux-2"],"_links":{"self":[{"href":"https:\/\/www.strongd.net\/index.php?rest_route=\/wp\/v2\/posts\/1532","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.strongd.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.strongd.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.strongd.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.strongd.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1532"}],"version-history":[{"count":1,"href":"https:\/\/www.strongd.net\/index.php?rest_route=\/wp\/v2\/posts\/1532\/revisions"}],"predecessor-version":[{"id":1533,"href":"https:\/\/www.strongd.net\/index.php?rest_route=\/wp\/v2\/posts\/1532\/revisions\/1533"}],"wp:attachment":[{"href":"https:\/\/www.strongd.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1532"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.strongd.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1532"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.strongd.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1532"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}