rasp log-learning and syslog-ng

1可以用串口代替ssh連接

2是用靜態ip的方法

https://blog.csdn.net/u013178472/article/details/78574878

3 logger會調用syslog機制

4 syslog-ng： vim /etc/syslog-ng/syslog-ng.conf

@version: 3.5
@include "scl.conf"
@include "`scl-root`/system/tty10.conf"

source test{
        udp(ip(0.0.0.0) port(514));
};

destination d_test{
        file("/var/tmp/D$YEAR-$MONTH-$DAY.log" owner(pi) group(pi) perm(0777) dir_perm(0777) create_dirs(yes));
};
#filter f_test{
#    level(debug);
#};

log {
    source(test);
#    filter(f_test);
    destination(d_test);
};

systemctl restart syslog-ng.service

重啓這個服務，通過systemctl看這個服務起來了沒

/usr/sbin/syslog-ng -F  強制啓動，看下問題出在哪？

通過udp與syslog-ng交互，創建一個socket，把收到的消息都發出去，在config文件中，指定保存的文件；但這個Python只是發一個字符串，所以曬有一個調用腳本run_socket_log.sh

import socket
import sys
import traceback

def main():
    pass

def sendMSG(msg):
    try:
        sock =  socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
        sock.connect(('127.0.0.1',514))
        sock.sendall(msg)
        sock.close()
    except Exception,e:
        print traceback.print_exc(e)

if __name__ == '__main__':
    if len(sys.argv) < 2 :
        print "please input message"
    msg=sys.argv[1]
    sendMSG(msg)

 run_socket_log.sh

#! /bin/bash

#for((i=0; i<10; i++))
for i in `seq 1 100`
do
    value=`echo "$i" | md5sum`;val="$i--$value"; python ./socket_log.py $val
done

結果會在指定目錄下，創建一個log，裏面有一個100個。。。。。

Sep 14 02:12:11 localhost 1--b026324c6904b2a9cb4b88d6d61c81d1
Sep 14 02:12:11 localhost 2--26ab0db90d72e28ad0ba1e22ee510510
Sep 14 02:12:11 localhost 3--6d7fce9fee471194aa8b5b6e47267f03
Sep 14 02:12:11 localhost 4--48a24b70a0b376535542b996af517398
Sep 14 02:12:11 localhost 5--1dcca23355272056f04fe8bf20edfce0
Sep 14 02:12:11 localhost 6--9ae0ea9e3c9c6e1b9b6252c8395efdc1
Sep 14 02:12:11 localhost 7--84bc3da1b3e33a18e8d5e1bdd7a18d7a

主要參考：

http://genggeng.iteye.com/blog/1359887

note：config文件的權限，我改成0777，並不好！！！暫時