Ubuntu Linux 14.04 чистая установка.
Логи auth.log, kern.log, syslog и т.д отсутствуют в /var/log
/etc/rsyslog.conf:
# /etc/rsyslog.conf Configuration file for rsyslog. # # For more information see # /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html # # Default logging rules can be found in /etc/rsyslog.d/50-default.conf ################# #### MODULES #### ################# $ModLoad imuxsock # provides support for local system logging $ModLoad imklog # provides kernel logging support #$ModLoad immark # provides --MARK-- message capability # provides UDP syslog reception #$ModLoad imudp #$UDPServerRun 514 # provides TCP syslog reception #$ModLoad imtcp #$InputTCPServerRun 514 ########################### #### GLOBAL DIRECTIVES #### ########################### # # Use traditional timestamp format. # To enable high precision timestamps, comment out the following line. # $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat # Filter duplicated messages $RepeatedMsgReduction on # # Set the default permissions for all log files. # $FileOwner syslog $FileGroup adm $FileCreateMode 0640 $DirCreateMode 0755 $Umask 0022 $PrivDropToUser syslog $PrivDropToGroup syslog # # Where to place spool and state files # $WorkDirectory /var/spool/rsyslog # # Include all config files in /etc/rsyslog.d/ # $IncludeConfig /etc/rsyslog.d/*.conf
/etc/rsyslog.d/*:
# Default rules for rsyslog. # # For more information see rsyslog.conf(5) and /etc/rsyslog.conf # # First some standard log files. Log by facility. # auth,authpriv.* /var/log/auth.log *.*;auth,authpriv.none -/var/log/syslog #cron.* /var/log/cron.log #daemon.* -/var/log/daemon.log kern.* -/var/log/kern.log #lpr.* -/var/log/lpr.log mail.* -/var/log/mail.log #user.* -/var/log/user.log # # Logging for the mail system. Split it up so that # it is easy to write scripts to parse these files. # #mail.info -/var/log/mail.info #mail.warn -/var/log/mail.warn mail.err /var/log/mail.err # # Logging for INN news system. # news.crit /var/log/news/news.crit news.err /var/log/news/news.err news.notice -/var/log/news/news.notice # # Some «catch-all» log files. # #*.=debug;\ # auth,authpriv.none;\ # news.none;mail.none -/var/log/debug #*.=info;*.=notice;*.=warn;\ # auth,authpriv.none;\ # cron,daemon.none;\ # mail,news.none -/var/log/messages # # Emergencies are sent to everybody logged in. # *.emerg :omusrmsg:* # # I like to have messages displayed on the console, but only on a virtual # console I usually leave idle. # #daemon,mail.*;\ # news.=crit;news.=err;news.=notice;\ # *.=debug;*.=info;\ # *.=notice;*.=warn /dev/tty8 # The named pipe /dev/xconsole is for the `xconsole' utility. To use it, # you must invoke `xconsole' with the `-file' option: # # $ xconsole -file /dev/xconsole [...] # # NOTE: adjust the list below, or you'll go crazy if you have a reasonably # busy site… # daemon.*;mail.*;\ news.err;\ *.=debug;*.=info;\ *.=notice;*.=warn |/dev/xconsole
ls -lha /var/log:
drwxrwxr-x 10 root fuse 4.0K Sep 7 04:12. drwxr-xr-x 12 root root 4.0K Jul 22 2014… -rw-r--r-- 1 root root 0 Jul 1 04:16 alternatives.log -rw-r--r-- 1 root root 4.1K Jun 8 23:25 alternatives.log.1 -rw-r--r-- 1 root root 363 Jun 7 22:16 alternatives.log.2.gz -rw-r--r-- 1 root root 2.8K Aug 18 2014 alternatives.log.3.gz drwxr-xr-x 2 root root 4.0K Jul 1 04:16 apt -rw-r--r-- 1 root root 3.8K Sep 7 04:11 boot.log -rw-r--r-- 1 root root 0 Jun 24 2014 bootstrap.log -rw-rw---- 1 root utmp 0 Sep 1 04:16 btmp -rw-rw---- 1 root utmp 768 Aug 16 20:41 btmp.1 drwxr-xr-x 2 root root 4.0K Sep 1 04:16 ConsoleKit drwxr-xr-x 2 root root 4.0K Sep 7 04:15 cups -rw-r----- 1 root adm 33K Sep 7 04:12 dmesg -rw-r----- 1 root adm 31K Sep 7 04:11 dmesg.0 -rw-r----- 1 root adm 11K Sep 6 04:13 dmesg.1.gz -rw-r----- 1 root adm 9.6K Sep 6 04:11 dmesg.2.gz -rw-r----- 1 root adm 11K Sep 5 04:13 dmesg.3.gz -rw-r----- 1 root adm 9.6K Sep 5 04:11 dmesg.4.gz -rw-r--r-- 1 root root 0 Jul 1 04:16 dpkg.log -rw-r--r-- 1 root root 16K Jun 8 23:25 dpkg.log.1 -rw-r--r-- 1 root root 2.1K Jun 7 23:14 dpkg.log.2.gz -rw-r--r-- 1 root root 60K Aug 18 2014 dpkg.log.3.gz -rw-r--r-- 1 root root 24K Jul 22 2014 faillog -rw-r--r-- 1 root root 3.0K Jul 22 2014 fontconfig.log drwxr-xr-x 2 root root 4.0K Jun 24 2014 fsck drwxr-xr-x 3 root root 4.0K Jul 22 2014 hp -rw-rw-r-- 1 root utmp 286K Sep 7 14:40 lastlog drwxr-xr-x 2 root root 4.0K Sep 7 04:11 lightdm drwxr-xr-x 3 root root 4.0K Sep 4 04:16 samba -rw-r--r-- 1 root root 153K Sep 7 04:11 udev drwxr-xr-x 2 root root 12K Sep 7 04:15 upstart -rw-rw-r-- 1 root utmp 48K Sep 7 14:40 wtmp -rw-rw-r-- 1 root utmp 262K Sep 1 04:12 wtmp.1 -rw-r--r-- 1 root root 11K Sep 7 04:11 Xorg.0.log -rw-r--r-- 1 root root 11K Sep 7 04:10 Xorg.0.log.old
service rsyslog status:
rsyslog start/running, process 5349
Где логи?