Linux下日志的采集和分析是一個非常重要的工作，一般廠商都會有自己獨有的命令，我這邊列舉下常用的兩個Linux廠商的收集命令(RedHat Linux以及SUSE Linux），便於收集後，對系統進行全面分析。
1. 基於redhat的日志收集
[root@openstack-01 etc]# sosreport
sosreport (version 3.2)
This command will collect diagnostic and configuration information from
this CentOS Linux system and installed applications.
An archive containing the collected information will be generated in
/var/tmp/sos.NUmfab and may be provided to a CentOS support
representative.
Any information provided to CentOS will be treated in accordance with
the published support policies at:
https://www.centos.org/
The generated archive may contain data considered sensitive and its
content should be reviewed by the originating organization before being
passed to any third party.
No changes will be made to system configuration.
Press ENTER to continue, or CTRL-C to quit.
Please enter your first initial and last name [openstack-01]:
Please enter the case id that you are generating this report for []:
Setting up archive ...
Setting up plugins ...
Running plugins. Please wait ...
Running 114/114: yum...
[plugin:openstack_swift] regex substitution failed for '/etc/swift/container.builder' with: ''utf8' codec can't decode byte 0x80 in position 0: invalid start byte'
[plugin:openstack_swift] regex substitution failed for '/etc/swift/container.ring.gz' with: ''utf8' codec can't decode byte 0x8b in position 1: invalid start byte'
Creating compressed archive...
Your sosreport has been generated and saved in:
/var/tmp/sosreport-openstack-01-20160603071544.tar.xz
The checksum is: 757286aeba8b7ca78b0614547c4d58c9
Please send this file to your support representative.
2. 基於SUSE Linux下的日志收集
使用腳本supportconfig -A收集日志，日志路徑會存在/var/log下。
--
TESTDBO2:/tmp/tools/nmon # supportconfig -A
============================================================================= Support Utilities - Supportconfig Script Version: 2.25-197 Script Date: 2010 04 02=============================================================================
Gathering system information Data Directory: /var/log/nts_TESTDBO2_140226_1114
Basic Server Health Check... Done RPM Database... Done Basic Environment... Done Basic Health Report... Done System Modules... Done Memory Details... Done Disk I/O... Done System Logs... Done YaST Files... Done Auditing... Done Crash Info... Done NTP... Done PROC... Done Boot Files... Done SLERT... Skipped Updates... Done SMT... Skipped Novell eDirectory... Please Wait... Skipped Novell LUM... Skipped Novell NCP... Skipped Novell NSS... Skipped Novell DFS... Skipped Novell SMS... Skipped Novell NCS... Skipped Novell AFP... Skipped Novell CIFS... Skipped HA Cluster... Skipped OCFS2... Skipped PAM... Done LDAP... Done CIMOM... Done Open Files... Done Environment... Done ETC... Done SYSCONFIG... Done SYSFS... Done System Daemons... Done CRON... Done AT... Done UDEV... Done LVM... Please Wait... Base Detail Done EVMS... Skipped Software Raid... Done Multipathing... Done Networking... Done Web... Done InfiniBand... Done DNS... Done DHCP... Done SLP... Please Wait... Services Done SSH... Done iSCSI... Done Samba... Done NFS... Done AUTOFS... Done SAR Files... Skipped AppArmor... Done Xen... Skipped X... Done Printing... Done SMART Disks... Done Hardware... Please Wait... Done File System List... Please Wait... Done Supportability Analysis... Please Wait... Done
Creating Tar Ball
==[ DONE ]=================================================================== Log file tar ball: /var/log/nts_TESTDBO2_140226_1114.tbz Log file size: 25M Log file md5sum: 36a0aaee37b5174e29278544ac3e8f61
Please attach the log file tar ball to your open Service Request at the following URL: https://secure-support.novell.com/eService_enu
You can also upload the tar ball to ftp.novell.com/incoming, or just use supportconfig -ur , to upload the tar ball automatically.
If you cannot attach the tar ball to the SR, then email it to the engineer.=============================================================================--
然後我們可以根據收集的相關信息，對系統進行分析
本文永久更新鏈接地址：
http://xxxxxx/Linuxjc/1141009.html TechArticle