Apache日誌輪詢Cronolog安裝及簡單用法

安裝日誌輪詢工具cronolog：

[root@bqh-119 tools]# tar xf cronolog-1.6.2.tar.gz 
[root@bqh-119 tools]# cd cronolog-1.6.2
[root@bqh-119 cronolog-1.6.2]# ./configure
make
make install
[root@bqh-119 cronolog-1.6.2]# ll /usr/local/sbin/cronolog
-rwxr-xr-x 1 root root 40486 7月  15 21:55 /usr/local/sbin/cronolog

按天輪詢：（生產環境常見用法，推薦使用）：

CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_blog_%Y%m%d.log" combined
CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%Y%m%d.log" combined

注：按天記錄日誌，日誌不會自動覆蓋。

按小時輪詢：（較常見用法）

CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_blog_%Y%m%d%H.log" combined
CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%Y%m%d%H.log" combined

注：適合短期分析的apache詳細日誌信息。

按周輪詢：（較常見用法）

CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_blog_%w.log" combined
CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%w.log" combined
----------------------------------------------------------------------------------------------↓↓↓分目錄按週記錄日誌
CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/%w/access_blog_%w.log" combined
CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/%w/access_bbs_%w.log" combined

注：每週循環覆蓋；若是須要保留少許日誌，供sa等使用，不做爲特殊其餘信息分析等，能夠按周輪詢，免去擔憂空間問題。

按月輪詢：

CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_blog_%Y%m.log" combined
CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%Y%m.log" combined

按天+按小時輪詢：

CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_blog_%Y%m%d.log" combined
CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_blog_%Y%m%d%H.log" combined
CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%Y%m%d.log" combined
CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%Y%m%%d%H.log" combined

.....能夠自由組合來輪詢日誌。

下面以按天輪詢日誌的測試配置：

[root@bqh-119 extra]# vim httpd-vhosts.conf

......以上省略 <VirtualHost *:80>
    ServerAdmin 1147076062@qq.com
    DocumentRoot "/var/html/blog"
    ServerName blog.bqh123.com
    ServerAlias bg.bqh123.com
    ErrorLog "logs/blog-error_log"
    CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_blog_%Y%m%d.log" combined
</VirtualHost>

<VirtualHost *:80>
    ServerAdmin 1147076062@qq.com
    DocumentRoot "/var/html/bbs"
    ServerName bbs.bqh123.com
    ServerAlias bs.bqh123.com
    ErrorLog "logs/bbs-error_log"
    CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%Y%m%d.log" combined
</VirtualHost>

 刷新配置：

[root@bqh-119 extra]# vim httpd-vhosts.conf
[root@bqh-119 extra]# ../../bin/apachectl -t
Syntax OK
[root@bqh-119 extra]# ../../bin/apachectl graceful

訪問測試，並查看日誌：

[root@bqh-119 logs]# ll
總用量 40
-rw-r--r-- 1 root   root  206 7月  15 22:34 access_bbs_20190715.log -rw-r--r-- 1 root   root  591 7月  15 23:10 access_blog_20190715.log -rw-r--r-- 1 root   root 1419 7月  14 21:52 access_log
-rw-r--r-- 1 root   root  805 7月  14 22:11 bbs-access_log
-rw-r--r-- 1 root   root  340 7月  14 21:27 bbs-error_log
-rw-r--r-- 1 root   root 1074 7月  15 21:36 blog-access_log
-rw-r--r-- 1 root   root  219 7月  14 20:02 blog-error_log
srwx------ 1 daemon root    0 7月  14 23:29 cgisock.1343
srwx------ 1 daemon root    0 7月  15 22:23 cgisock.1625
srwx------ 1 daemon root    0 7月  13 23:40 cgisock.58405
-rw-r--r-- 1 root   root 5941 7月  15 22:23 error_log
-rw-r--r-- 1 root   root    5 7月  15 22:23 httpd.pid
[root@bqh-119 logs]# tail -2 ./access_blog_20190715.log 
192.168.0.105 - - [15/Jul/2019:22:35:07 +0800] "GET / HTTP/1.1" 200 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
[root@bqh-119 logs]# tail -2 ./access_bbs_20190715.log 
192.168.0.105 - - [15/Jul/2019:22:34:45 +0800] "GET / HTTP/1.1" 200 22 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"

apache不記錄圖片的日誌：

程序配置：
<FilesMatch 「\.(css|js|gif|jpg|ico|swf)」>
    SetEnv IMAG 1
</FilesMatch>

日誌配置：
<VirtualHost *:80>
    ServerAdmin 1147076062@qq.com
    DocumentRoot "/var/html/bbs"
    ServerName bbs.bqh123.com
    ServerAlias bs.bqh123.com
    ErrorLog "logs/bbs-error_log"
    CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%Y%m%d.log" combined env=!dontlog

RS服務器不記錄負載均衡健康檢查日誌(check.html)：

<VirtualHost *:80>
    ServerAdmin 1147076062@qq.com
    DocumentRoot "/var/html/bbs"
    ServerName bbs.bqh123.com
    ServerAlias bs.bqh123.com
    SetEnvIf Request_URI 「^/check\.html$」 dontlog
    ErrorLog "logs/bbs-error_log"
    CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%Y%m%d.log" combined env=!dontlog
</VirtualHost>

統計apache日誌單IP訪問請求數排名：

[root@bqh-119 logs]# awk '{print $1}' ./access_bbs_20190715.log |sort|uniq -c|sort -rn -k1
      114 192.168.0.105
       93 192.168.0.200
       42 192.168.0.88
       32 192.168.0.109
       22 192.168.0.107
       12 192.168.0.10
        1 192.168.0.96
        1 192.168.0.5
        1 192.168.0.222
        1 192.168.0.15
        1 192.168.0.110
[root@bqh-119 logs]# awk '{++s[$1]} END {for (key in s) print s[key],key}' access_bbs_20190715.log |sort -rn -k1 144 192.168.0.105
 93 192.168.0.200
 42 192.168.0.88
 32 192.168.0.109
 22 192.168.0.107
 12 192.168.0.10
  1 192.168.0.96
  1 192.168.0.5
  1 192.168.0.222
1 192.168.0.15
1 192.168.0.110