Hier werden die Unterschiede zwischen zwei Versionen gezeigt.
|
lpi1:logging [2018/07/05 14:23] |
lpi1:logging [2026/04/22 14:07] (aktuell) |
||
|---|---|---|---|
| Zeile 1: | Zeile 1: | ||
| + | ====== Gängige Befehle ===== | ||
| + | ls -lrt /var/log | ||
| + | tail -F /var/log/messages | ||
| + | less /var/log/messages | ||
| + | grep Testmeldung /var/log/* | ||
| + | |||
| + | Falls vorhanden: | ||
| + | multitail /var/log/messages | ||
| + | |||
| + | ====== logs auswerten ====== | ||
| + | ===== Übersicht Logging-Stacks ===== | ||
| + | |||
| + | ^ ^ Collection ->^ Aggregation ->^ Storage ^ <- Analysis ^ | ||
| + | ^ | logger ->| [[syslog|rsyslog]] ->| /var/log, ... | <- grep / less / logcheck / … | | ||
| + | ^ journald | logger / systemd / … ->|| [[journald]] | <- journalctl | | ||
| + | ^ ELK | (File)Beat ->| Logstash ->| Elasicsearch | <- Kibana | | ||
| + | ^ EFK | Fluentbit ->| Fluentd ->| Elasicsearch | <- Kibana | | ||
| + | ^ Graylog | Graylog ->| Graylog ->| Elasicsearch | <- Graylog | | ||
| + | ^ Victoria Logs | vlagent / Fluentbit ->|| Victoria Logs | <- Grafana | | ||
| + | ^ Loki | Alloy / Promtail ->|| Loki | <- Grafana | | ||
| + | |||
| + | |||