{"id":45220,"date":"2025-06-23T06:46:16","date_gmt":"2025-06-22T22:46:16","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/45220.html"},"modified":"2025-06-23T06:46:16","modified_gmt":"2025-06-22T22:46:16","slug":"rsyslog%e6%97%a5%e5%bf%97-%e5%a6%82%e4%bd%95%e6%8a%8a-%e6%af%94%e5%a6%82%e4%ba%a4%e6%8d%a2%e6%9c%ba%ef%bc%8c%e8%b7%af%e7%94%b1%e5%99%a8%e8%bf%99%e7%b1%bb%e7%9a%84-%e4%bb%a5%e5%8f%8a%e6%9c%8d%e5%8a%a1","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/45220.html","title":{"rendered":"rsyslog\u65e5\u5fd7 \u5982\u4f55\u628a \u6bd4\u5982\u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7 \u5168\u90e8\u96c6\u4e2d\u5230\u4e00\u53f0\u4e13\u95e8\u6751\u65e5\u5fd7\u7684\u670d\u52a1\u5668\u4e2d \u8fd8\u80fd\u4fdd\u8bc1 \u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7\u6e90\u7cfb\u7edf\u90e8\u52066"},"content":{"rendered":"

\u8981\u5c06\u4ea4\u6362\u673a\u3001\u8def\u7531\u5668\u548c\u670d\u52a1\u5668\u65e5\u5fd7\u96c6\u4e2d\u5b58\u50a8\u5230\u4e13\u7528\u65e5\u5fd7\u670d\u52a1\u5668，\u540c\u65f6\u786e\u4fdd\u6e90\u8bbe\u5907（\u4ea4\u6362\u673a\u3001\u8def\u7531\u5668\u3001\u670d\u52a1\u5668）\u7684\u672c\u5730\u5b58\u50a8\u7a7a\u95f4\u4e0d\u88ab\u5360\u6ee1，\u9700\u91c7\u7528 \u667a\u80fd\u65e5\u5fd7\u8f6c\u53d1+\u672c\u5730\u8f6e\u8f6c \u7b56\u7565\u3002\u4ee5\u4e0b\u662f\u5177\u4f53\u5b9e\u65bd\u65b9\u6848：<\/p>\n

\n

\u4e00\u3001\u6838\u5fc3\u8bbe\u8ba1\u539f\u5219<\/h4>\n
  • \n

    \u6e90\u8bbe\u5907：\u53ea\u4fdd\u7559\u77ed\u671f\u65e5\u5fd7（\u59827\u5929），\u81ea\u52a8\u6e05\u7406\u65e7\u65e5\u5fd7<\/p>\n<\/li>\n

  • \n

    \u65e5\u5fd7\u670d\u52a1\u5668：\u957f\u671f\u5b58\u50a8\u539f\u59cb\u65e5\u5fd7（\u59821\u5e74）+ \u5206\u6790\u5f52\u6863<\/p>\n<\/li>\n

  • \n

    \u4f20\u8f93\u534f\u8bae：\u4f18\u5148\u4f7f\u7528 TCP+TLS \u4fdd\u969c\u53ef\u9760\u6027<\/p>\n<\/li>\n

    \n

    \u4e8c\u3001\u7f51\u7edc\u8bbe\u5907\u914d\u7f6e（\u4ee5Cisco\/Huawei\u4e3a\u4f8b）<\/h4>\n

    1. Cisco\u8bbe\u5907 – \u63a7\u5236\u672c\u5730\u5b58\u50a8<\/h5>\n

    cisco<\/p>\n

    ! \u9650\u5236\u672c\u5730\u65e5\u5fd7\u7f13\u5b58\u5927\u5c0f（\u9ed8\u8ba44MB）
    \nlogging buffered 4096
    \n! \u8bbe\u7f6e\u65e5\u5fd7\u670d\u52a1\u5668（TCP）
    \nlogging host 192.168.1.100 transport tcp
    \n! \u7981\u6b62\u5411\u63a7\u5236\u53f0\u8f93\u51fa\u65e5\u5fd7
    \nno logging console
    \n! \u81ea\u52a8\u6e05\u7406\u65e7\u65e5\u5fd7（\u6bcf\u5f53\u65e5\u5fd7\u6ee1\u65f6）
    \nlogging persistent url flash:\/logs size 10 filesize 4 <\/p>\n

    2. Huawei\u8bbe\u5907 – \u672c\u5730\u65e5\u5fd7\u8f6e\u8f6c<\/h5>\n

    huawei<\/p>\n

    # \u8bbe\u7f6e\u65e5\u5fd7\u670d\u52a1\u5668
    \ninfo-center loghost 192.168.1.100 facility local6
    \n# \u9650\u5236\u672c\u5730\u65e5\u5fd7\u6587\u4ef6\u5927\u5c0f（\u6700\u592710MB，\u4fdd\u75595\u4e2a）
    \ninfo-center logfile size 10 max-file-number 5
    \n# \u5173\u95ed\u4e0d\u5fc5\u8981\u8f93\u51fa
    \ninfo-center console channel deny <\/p>\n

    \n

    \u4e09\u3001Linux\u670d\u52a1\u5668\u914d\u7f6e<\/h4>\n

    1. \u5ba2\u6237\u7aef\u914d\u7f6e（\u63a7\u5236\u672c\u5730\u5b58\u50a8）<\/h5>\n

    bash<\/p>\n

    # \/etc\/rsyslog.d\/forward.conf
    \n# \u8f6c\u53d1\u6240\u6709\u65e5\u5fd7\u5230\u4e2d\u5fc3\u670d\u52a1\u5668
    \n*.* @@192.168.1.100:514 # TCP\u4f20\u8f93<\/p>\n

    # \u672c\u5730\u53ea\u4fdd\u75597\u5929\u65e5\u5fd7（\u901a\u8fc7logrotate）
    \nsudo tee \/etc\/logrotate.d\/rsyslog-local <<'EOF'
    \n\/var\/log\/syslog {
    \n daily
    \n rotate 7
    \n compress
    \n delaycompress
    \n missingok
    \n postrotate
    \n \/usr\/lib\/rsyslog\/rsyslog-rotate
    \n endscript
    \n}
    \nEOF <\/p>\n

    2. \u65e5\u5fd7\u670d\u52a1\u5668\u914d\u7f6e<\/h5>\n

    bash<\/p>\n

    # \/etc\/rsyslog.d\/central.conf
    \n# \u63a5\u6536\u8fdc\u7a0b\u65e5\u5fd7\u5e76\u5206\u7c7b\u5b58\u50a8
    \n$template RemoteLogs,"\/var\/log\/remote\/%FROMHOST-IP%\/%$YEAR%-%$MONTH%-%$DAY%.log"
    \nruleset(name="remote") {
    \n action(type="omfile" template="RemoteLogs")
    \n # \u53ef\u9009：\u540c\u65f6\u5199\u5165Elasticsearch
    \n action(type="omelasticsearch" server="localhost" index="logs-%FROMHOST-IP%")
    \n}<\/p>\n

    module(load="imtcp" MaxSessions="500")
    \ninput(type="imtcp" port="514" ruleset="remote") <\/p>\n

    \n

    \u56db\u3001Windows\u670d\u52a1\u5668\u914d\u7f6e<\/h4>\n

    \u4f7f\u7528 NXLog CE（\u793e\u533a\u7248）\u5b9e\u73b0\u65e5\u5fd7\u8f6c\u53d1\u548c\u672c\u5730\u6e05\u7406：<\/p>\n

    xml<\/p>\n

    # nxlog.conf
    \n<Input eventlog>
    \n Module im_msvistalog
    \n SavePos TRUE
    \n<\/Input><\/p>\n

    <Output file>
    \n Module om_file
    \n File "C:\\\\\\\\Logs\\\\\\\\system_events.log"
    \n Exec if file_size() > 10MB file_cycle();
    \n<\/Output><\/p>\n

    <Output rsyslog>
    \n Module om_tcp
    \n Host 192.168.1.100
    \n Port 514
    \n<\/Output><\/p>\n

    <Route 1>
    \n Path eventlog => file, rsyslog
    \n<\/Route> <\/p>\n

    \n

    \u4e94\u3001\u5b58\u50a8\u7a7a\u95f4\u4fdd\u969c\u63aa\u65bd<\/h4>\n

    1. \u6e90\u8bbe\u5907\u7a7a\u95f4\u63a7\u5236<\/h5>\n\n\u8bbe\u5907\u7c7b\u578b\u63a7\u5236\u65b9\u6cd5<\/tr>\n\n\n\n\n\n
    Cisco<\/td>\nlogging buffered 4096 + logging persistent size 10<\/td>\n<\/tr>\n
    Huawei<\/td>\ninfo-center logfile size 10 max-file-number 5<\/td>\n<\/tr>\n
    Linux<\/td>\nlogrotate \u6309\u5927\u5c0f\/\u65f6\u95f4\u8f6e\u8f6c<\/td>\n<\/tr>\n
    Windows<\/td>\nNXLog\u7684file_cycle()\u51fd\u6570<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
    2. \u65e5\u5fd7\u670d\u52a1\u5668\u5b58\u50a8\u89c4\u5212<\/h5>\n

    bash<\/p>\n

    # \u8ba1\u7b97\u6240\u9700\u5b58\u50a8\u7a7a\u95f4
    \n\u9884\u4f30\u516c\u5f0f：
    \n\u603b\u7a7a\u95f4 = (\u5355\u8bbe\u5907\u65e5\u5747\u65e5\u5fd7\u91cf \u00d7 \u8bbe\u5907\u6570 \u00d7 \u4fdd\u7559\u5929\u6570) \u00d7 \u5197\u4f59\u7cfb\u6570(1.3)<\/p>\n

    \u793a\u4f8b：
    \n50\u53f0\u8bbe\u5907 \u00d7 50MB\/\u5929 \u00d7 365\u5929 \u00d7 1.3 \u2248 1.2TB <\/p>\n

    3. \u81ea\u52a8\u6e05\u7406\u811a\u672c（\u65e5\u5fd7\u670d\u52a1\u5668）<\/h5>\n

    bash<\/p>\n

    # \/usr\/local\/bin\/clean_old_logs.sh
    \n#!\/bin\/bash
    \nfind \/var\/log\/remote\/ -name "*.log" -mtime +365 -delete
    \n# \u6dfb\u52a0\u5230cron
    \n(crontab -l ; echo "0 3 * * * \/usr\/local\/bin\/clean_old_logs.sh") | crontab – <\/p>\n

    \n

    \u516d\u3001\u4f20\u8f93\u53ef\u9760\u6027\u4fdd\u969c<\/h4>\n

    1. \u65ad\u7f51\u7f13\u5b58（\u5ba2\u6237\u7aef）<\/h5>\n

    bash<\/p>\n

    # Linux\u5ba2\u6237\u7aef\u914d\u7f6e\u672c\u5730\u961f\u5217
    \n# \/etc\/rsyslog.d\/queue.conf
    \n$ActionQueueFileName queue # \u5185\u5b58\u961f\u5217\u540d\u79f0
    \n$ActionQueueMaxDiskSpace 1g # \u6700\u5927\u78c1\u76d8\u7f13\u5b58
    \n$ActionQueueSaveOnShutdown on
    \n$ActionQueueType LinkedList
    \n$ActionResumeRetryCount -1 # \u65e0\u9650\u91cd\u8bd5 <\/p>\n

    2. \u65e5\u5fd7\u5b8c\u6574\u6027\u6821\u9a8c<\/h5>\n

    bash<\/p>\n

    # \u4f7f\u7528rsyslog\u7684imfile\u6a21\u5757\u8ddf\u8e2a\u6587\u4ef6\u4f4d\u7f6e
    \nmodule(load="imfile" Mode="inotify")
    \ninput(
    \n type="imfile"
    \n File="\/var\/log\/network.log"
    \n Tag="net-device"
    \n ReadMode="2" # \u8ddf\u8e2ainode\u9632\u6b62\u65e5\u5fd7\u8f6e\u8f6c\u4e22\u5931
    \n) <\/p>\n

    \n

    \u4e03\u3001\u76d1\u63a7\u4e0e\u544a\u8b66<\/h4>\n

    1. \u65e5\u5fd7\u6536\u96c6\u72b6\u6001\u76d1\u63a7<\/h5>\n

    bash<\/p>\n

    # \u68c0\u67e5\u5404\u8bbe\u5907\u6700\u65b0\u65e5\u5fd7\u65f6\u95f4
    \nfind \/var\/log\/remote\/ -type f -name "*.log" -exec stat -c "%n %y" {} \\\\; | sort -k2 <\/p>\n

    2. Prometheus\u76d1\u63a7\u6307\u6807<\/h5>\n

    yaml<\/p>\n

    # rsyslog exporter\u914d\u7f6e
    \nscrape_configs:
    \n – job_name: 'rsyslog'
    \n static_configs:
    \n – targets: ['192.168.1.100:9100'] <\/p>\n

    3. \u78c1\u76d8\u7a7a\u95f4\u544a\u8b66\u89c4\u5219<\/h5>\n

    bash<\/p>\n

    # \/usr\/local\/bin\/check_disk.sh
    \n#!\/bin\/bash
    \nTHRESHOLD=90
    \nUSAGE=$(df -h \/var\/log | awk 'NR==2{print $5}' | tr -d '%')
    \n[ $USAGE -gt $THRESHOLD ] && \\\\
    \necho "Alert: Log disk usage $USAGE%" | mail -s "STORAGE ALERT" admin@example.com <\/p>\n

    \n

    \u516b\u3001\u5b9e\u65bd\u6d41\u7a0b\u56fe<\/h4>\n

    \u56fe\u8868<\/p>\n

    \"\"<\/p>\n

    \u4ee3\u7801<\/p>\n

    \n

    \u901a\u8fc7\u4ee5\u4e0a\u65b9\u6848，\u60a8\u5c06\u83b7\u5f97：<\/p>\n

      \n
    • \n

      \u6e90\u8bbe\u5907：\u672c\u5730\u4ec5\u4fdd\u7559\u5fc5\u8981\u65e5\u5fd7，\u907f\u514d\u5b58\u50a8\u6ea2\u51fa<\/p>\n<\/li>\n

    • \n

      \u96c6\u4e2d\u5b58\u50a8：\u6240\u6709\u539f\u59cb\u65e5\u5fd7\u957f\u671f\u4fdd\u7559\u5728\u4e13\u7528\u670d\u52a1\u5668<\/p>\n<\/li>\n

    • \n

      \u53ef\u9760\u6027：\u65ad\u7f51\u7f13\u5b58+\u52a0\u5bc6\u4f20\u8f93\u786e\u4fdd\u6570\u636e\u4e0d\u4e22\u5931<\/p>\n<\/li>\n

    • \n

      \u53ef\u6269\u5c55\u6027：\u652f\u6301\u540e\u7eed\u63a5\u5165SIEM\u5206\u6790\u5e73\u53f0（\u5982Splunk）<\/p>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"

      \u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb696\u6b21\uff0c\u70b9\u8d5e11\u6b21\uff0c\u6536\u85cf24\u6b21\u3002\u8981\u5c06\u4ea4\u6362\u673a\u3001\u8def\u7531\u5668\u548c\u670d\u52a1\u5668\u65e5\u5fd7\u96c6\u4e2d\u5b58\u50a8\u5230\u4e13\u7528\u65e5\u5fd7\u670d\u52a1\u5668\uff0c\u540c\u65f6\u786e\u4fdd\u6e90\u8bbe\u5907\uff08\u4ea4\u6362\u673a\u3001\u8def\u7531\u5668\u3001\u670d\u52a1\u5668\uff09\u7684\u672c\u5730\u5b58\u50a8\u7a7a\u95f4\u4e0d\u88ab\u5360\u6ee1\uff0c\u9700\u91c7\u7528\u3002\u603b\u7a7a\u95f4 = (\u5355\u8bbe\u5907\u65e5\u5747\u65e5\u5fd7\u91cf \u00d7 \u8bbe\u5907\u6570 \u00d7 \u4fdd\u7559\u5929\u6570) \u00d7 \u5197\u4f59\u7cfb\u6570(1.3)# \u9650\u5236\u672c\u5730\u65e5\u5fd7\u6587\u4ef6\u5927\u5c0f\uff08\u6700\u592710MB\uff0c\u4fdd\u75595\u4e2a\uff09# \u672c\u5730\u53ea\u4fdd\u75597\u5929\u65e5\u5fd7\uff08\u901a\u8fc7logrotate\uff09\uff1a\u53ea\u4fdd\u7559\u77ed\u671f\u65e5\u5fd7\uff08\u59827\u5929\uff09\uff0c\u81ea\u52a8\u6e05\u7406\u65e7\u65e5\u5fd7\u3002\uff1a\u957f\u671f\u5b58\u50a8\u539f\u59cb\u65e5\u5fd7\uff08\u59821\u5e74\uff09+ \u5206\u6790\u5f52\u6863\u3002\u9650\u5236\u672c\u5730\u65e5\u5fd7\u7f13\u5b58\u5927\u5c0f\uff08\u9ed8\u8ba44MB\uff09\u81ea\u52a8\u6e05\u7406\u65e7\u65e5\u5fd7\uff08\u6bcf\u5f53\u65e5\u5fd7\u6ee1\u65f6\uff09\uff1a\u672c\u5730\u4ec5\u4fdd\u7559\u5fc5\u8981\u65e5\u5fd7\uff0c\u907f\u514d\u5b58\u50a8\u6ea2\u51fa\u3002<\/p>\n","protected":false},"author":2,"featured_media":45219,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[167,43,78,44],"topic":[],"class_list":["post-45220","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-167","tag-43","tag-78","tag-44"],"yoast_head":"\nrsyslog\u65e5\u5fd7 \u5982\u4f55\u628a \u6bd4\u5982\u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7 \u5168\u90e8\u96c6\u4e2d\u5230\u4e00\u53f0\u4e13\u95e8\u6751\u65e5\u5fd7\u7684\u670d\u52a1\u5668\u4e2d \u8fd8\u80fd\u4fdd\u8bc1 \u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7\u6e90\u7cfb\u7edf\u90e8\u52066 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/45220.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"rsyslog\u65e5\u5fd7 \u5982\u4f55\u628a \u6bd4\u5982\u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7 \u5168\u90e8\u96c6\u4e2d\u5230\u4e00\u53f0\u4e13\u95e8\u6751\u65e5\u5fd7\u7684\u670d\u52a1\u5668\u4e2d \u8fd8\u80fd\u4fdd\u8bc1 \u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7\u6e90\u7cfb\u7edf\u90e8\u52066 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb696\u6b21\uff0c\u70b9\u8d5e11\u6b21\uff0c\u6536\u85cf24\u6b21\u3002\u8981\u5c06\u4ea4\u6362\u673a\u3001\u8def\u7531\u5668\u548c\u670d\u52a1\u5668\u65e5\u5fd7\u96c6\u4e2d\u5b58\u50a8\u5230\u4e13\u7528\u65e5\u5fd7\u670d\u52a1\u5668\uff0c\u540c\u65f6\u786e\u4fdd\u6e90\u8bbe\u5907\uff08\u4ea4\u6362\u673a\u3001\u8def\u7531\u5668\u3001\u670d\u52a1\u5668\uff09\u7684\u672c\u5730\u5b58\u50a8\u7a7a\u95f4\u4e0d\u88ab\u5360\u6ee1\uff0c\u9700\u91c7\u7528\u3002\u603b\u7a7a\u95f4 = (\u5355\u8bbe\u5907\u65e5\u5747\u65e5\u5fd7\u91cf \u00d7 \u8bbe\u5907\u6570 \u00d7 \u4fdd\u7559\u5929\u6570) \u00d7 \u5197\u4f59\u7cfb\u6570(1.3)# \u9650\u5236\u672c\u5730\u65e5\u5fd7\u6587\u4ef6\u5927\u5c0f\uff08\u6700\u592710MB\uff0c\u4fdd\u75595\u4e2a\uff09# \u672c\u5730\u53ea\u4fdd\u75597\u5929\u65e5\u5fd7\uff08\u901a\u8fc7logrotate\uff09\uff1a\u53ea\u4fdd\u7559\u77ed\u671f\u65e5\u5fd7\uff08\u59827\u5929\uff09\uff0c\u81ea\u52a8\u6e05\u7406\u65e7\u65e5\u5fd7\u3002\uff1a\u957f\u671f\u5b58\u50a8\u539f\u59cb\u65e5\u5fd7\uff08\u59821\u5e74\uff09+ \u5206\u6790\u5f52\u6863\u3002\u9650\u5236\u672c\u5730\u65e5\u5fd7\u7f13\u5b58\u5927\u5c0f\uff08\u9ed8\u8ba44MB\uff09\u81ea\u52a8\u6e05\u7406\u65e7\u65e5\u5fd7\uff08\u6bcf\u5f53\u65e5\u5fd7\u6ee1\u65f6\uff09\uff1a\u672c\u5730\u4ec5\u4fdd\u7559\u5fc5\u8981\u65e5\u5fd7\uff0c\u907f\u514d\u5b58\u50a8\u6ea2\u51fa\u3002\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/45220.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2025-06-22T22:46:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/06\/20250622224615-685887b73fc5a.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/45220.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/45220.html\",\"name\":\"rsyslog\u65e5\u5fd7 \u5982\u4f55\u628a \u6bd4\u5982\u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7 \u5168\u90e8\u96c6\u4e2d\u5230\u4e00\u53f0\u4e13\u95e8\u6751\u65e5\u5fd7\u7684\u670d\u52a1\u5668\u4e2d \u8fd8\u80fd\u4fdd\u8bc1 \u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7\u6e90\u7cfb\u7edf\u90e8\u52066 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2025-06-22T22:46:16+00:00\",\"dateModified\":\"2025-06-22T22:46:16+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/45220.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/45220.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/45220.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"rsyslog\u65e5\u5fd7 \u5982\u4f55\u628a \u6bd4\u5982\u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7 \u5168\u90e8\u96c6\u4e2d\u5230\u4e00\u53f0\u4e13\u95e8\u6751\u65e5\u5fd7\u7684\u670d\u52a1\u5668\u4e2d \u8fd8\u80fd\u4fdd\u8bc1 \u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7\u6e90\u7cfb\u7edf\u90e8\u52066\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"rsyslog\u65e5\u5fd7 \u5982\u4f55\u628a \u6bd4\u5982\u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7 \u5168\u90e8\u96c6\u4e2d\u5230\u4e00\u53f0\u4e13\u95e8\u6751\u65e5\u5fd7\u7684\u670d\u52a1\u5668\u4e2d \u8fd8\u80fd\u4fdd\u8bc1 \u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7\u6e90\u7cfb\u7edf\u90e8\u52066 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/45220.html","og_locale":"zh_CN","og_type":"article","og_title":"rsyslog\u65e5\u5fd7 \u5982\u4f55\u628a \u6bd4\u5982\u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7 \u5168\u90e8\u96c6\u4e2d\u5230\u4e00\u53f0\u4e13\u95e8\u6751\u65e5\u5fd7\u7684\u670d\u52a1\u5668\u4e2d \u8fd8\u80fd\u4fdd\u8bc1 \u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7\u6e90\u7cfb\u7edf\u90e8\u52066 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb696\u6b21\uff0c\u70b9\u8d5e11\u6b21\uff0c\u6536\u85cf24\u6b21\u3002\u8981\u5c06\u4ea4\u6362\u673a\u3001\u8def\u7531\u5668\u548c\u670d\u52a1\u5668\u65e5\u5fd7\u96c6\u4e2d\u5b58\u50a8\u5230\u4e13\u7528\u65e5\u5fd7\u670d\u52a1\u5668\uff0c\u540c\u65f6\u786e\u4fdd\u6e90\u8bbe\u5907\uff08\u4ea4\u6362\u673a\u3001\u8def\u7531\u5668\u3001\u670d\u52a1\u5668\uff09\u7684\u672c\u5730\u5b58\u50a8\u7a7a\u95f4\u4e0d\u88ab\u5360\u6ee1\uff0c\u9700\u91c7\u7528\u3002\u603b\u7a7a\u95f4 = (\u5355\u8bbe\u5907\u65e5\u5747\u65e5\u5fd7\u91cf \u00d7 \u8bbe\u5907\u6570 \u00d7 \u4fdd\u7559\u5929\u6570) \u00d7 \u5197\u4f59\u7cfb\u6570(1.3)# \u9650\u5236\u672c\u5730\u65e5\u5fd7\u6587\u4ef6\u5927\u5c0f\uff08\u6700\u592710MB\uff0c\u4fdd\u75595\u4e2a\uff09# \u672c\u5730\u53ea\u4fdd\u75597\u5929\u65e5\u5fd7\uff08\u901a\u8fc7logrotate\uff09\uff1a\u53ea\u4fdd\u7559\u77ed\u671f\u65e5\u5fd7\uff08\u59827\u5929\uff09\uff0c\u81ea\u52a8\u6e05\u7406\u65e7\u65e5\u5fd7\u3002\uff1a\u957f\u671f\u5b58\u50a8\u539f\u59cb\u65e5\u5fd7\uff08\u59821\u5e74\uff09+ \u5206\u6790\u5f52\u6863\u3002\u9650\u5236\u672c\u5730\u65e5\u5fd7\u7f13\u5b58\u5927\u5c0f\uff08\u9ed8\u8ba44MB\uff09\u81ea\u52a8\u6e05\u7406\u65e7\u65e5\u5fd7\uff08\u6bcf\u5f53\u65e5\u5fd7\u6ee1\u65f6\uff09\uff1a\u672c\u5730\u4ec5\u4fdd\u7559\u5fc5\u8981\u65e5\u5fd7\uff0c\u907f\u514d\u5b58\u50a8\u6ea2\u51fa\u3002","og_url":"https:\/\/www.wsisp.com\/helps\/45220.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2025-06-22T22:46:16+00:00","og_image":[{"url":"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/06\/20250622224615-685887b73fc5a.png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"2 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/45220.html","url":"https:\/\/www.wsisp.com\/helps\/45220.html","name":"rsyslog\u65e5\u5fd7 \u5982\u4f55\u628a \u6bd4\u5982\u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7 \u5168\u90e8\u96c6\u4e2d\u5230\u4e00\u53f0\u4e13\u95e8\u6751\u65e5\u5fd7\u7684\u670d\u52a1\u5668\u4e2d \u8fd8\u80fd\u4fdd\u8bc1 \u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7\u6e90\u7cfb\u7edf\u90e8\u52066 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2025-06-22T22:46:16+00:00","dateModified":"2025-06-22T22:46:16+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/45220.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/45220.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/45220.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"rsyslog\u65e5\u5fd7 \u5982\u4f55\u628a \u6bd4\u5982\u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7 \u5168\u90e8\u96c6\u4e2d\u5230\u4e00\u53f0\u4e13\u95e8\u6751\u65e5\u5fd7\u7684\u670d\u52a1\u5668\u4e2d \u8fd8\u80fd\u4fdd\u8bc1 \u4ea4\u6362\u673a\uff0c\u8def\u7531\u5668\u8fd9\u7c7b\u7684 \u4ee5\u53ca\u670d\u52a1\u5668\u4e4b\u7c7b\u7684\u65e5\u5fd7\u6e90\u7cfb\u7edf\u90e8\u52066"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/45220","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=45220"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/45220\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media\/45219"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=45220"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=45220"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=45220"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=45220"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}