温馨提示×

如何设置Linux syslog日志保留期限

小樊
43
2025-02-26 01:31:40
栏目: 智能运维
Linux服务器限时活动,0元免费领,库存有限,领完即止! 点击查看>>

在Linux系统中,syslog日志保留期限可以通过配置rsyslog或syslog-ng来实现。以下是两种常见的方法:

使用rsyslog

  1. 编辑rsyslog配置文件: 打开rsyslog的配置文件,通常位于/etc/rsyslog.conf/etc/rsyslog.d/50-default.conf

    sudo nano /etc/rsyslog.conf
    
  2. 设置日志轮转: 在配置文件中添加或修改以下内容,以设置日志文件的轮转策略。例如,保留7天的日志文件:

    # 每天轮转日志文件,并保留7天的日志
    $SystemLogRateLimitInterval 24h
    $SystemLogRateLimitBurst 5000
    $OmitLocalLogging on
    $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
    $IncludeConfig /etc/rsyslog.d/*.conf
    $DirCreateMode 0755
    $Umask 0022
    $PrivDropToUser syslog
    $PrivDropToGroup adm
    $SystemLogFacility local0
    $SystemLogSeverity info
    $SystemLogIdent rsyslogd
    $SystemLogSyslogIdentifier rsyslogd
    $SystemLogFacility local1
    $SystemLogSeverity notice
    $SystemLogSyslogIdentifier rsyslogd
    $SystemLogFacility local2
    $SystemLogSeverity warning
    $SystemLogSyslogIdentifier rsyslogd
    $SystemLogFacility local3
    $SystemLogSeverity err
    $SystemLogSyslogIdentifier rsyslogd
    $SystemLogFacility local4
    $SystemLogSeverity crit
    $SystemLogSyslogIdentifier rsyslogd
    $SystemLogFacility local5
    $SystemLogSeverity alert
    $SystemLogSyslogIdentifier rsyslogd
    $SystemLogFacility local6
    $SystemLogSeverity emerg
    $SystemLogSyslogIdentifier rsyslogd
    $SystemLogFacility local7
    $SystemLogSeverity debug
    $SystemLogSyslogIdentifier rsyslogd
    $SystemLogFacility authpriv.* /var/log/auth.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $SystemLogFacility auth.* /var/log/auth.log
    $SystemLogFacility authpriv.* /var/log/authpriv.log
    $SystemLogFacility cron.* /var/log/cron.log
    $SystemLogFacility daemon.* /var/log/daemon.log
    $SystemLogFacility kern.* /var/log/kern.log
    $SystemLogFacility lpr.* /var/log/lpr.log
    $SystemLogFacility mail.* /var/log/mail.log
    $SystemLogFacility user.* /var/log/user.log
    $SystemLogFacility news.* /var/log/news.log
    $SystemLogFacility uucp.* /var/log/uucp.log
    $

亿速云「云服务器」,即开即用、新一代英特尔至强铂金CPU、三副本存储NVMe SSD云盘,价格低至29元/月。点击查看>>

推荐阅读:如何设置CentOS日志保留期限

0