安裝日誌輪詢工具cronolog:css
[root@bqh-119 tools]# tar xf cronolog-1.6.2.tar.gz [root@bqh-119 tools]# cd cronolog-1.6.2 [root@bqh-119 cronolog-1.6.2]# ./configure make make install [root@bqh-119 cronolog-1.6.2]# ll /usr/local/sbin/cronolog -rwxr-xr-x 1 root root 40486 7月 15 21:55 /usr/local/sbin/cronolog
按天輪詢:(生產環境常見用法,推薦使用):html
CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_blog_%Y%m%d.log" combined CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%Y%m%d.log" combined
注:按天記錄日誌,日誌不會自動覆蓋。apache
按小時輪詢:(較常見用法)vim
CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_blog_%Y%m%d%H.log" combined CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%Y%m%d%H.log" combined
注:適合短期分析的apache詳細日誌信息。服務器
按周輪詢:(較常見用法)app
CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_blog_%w.log" combined CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%w.log" combined ----------------------------------------------------------------------------------------------↓↓↓分目錄按週記錄日誌 CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/%w/access_blog_%w.log" combined CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/%w/access_bbs_%w.log" combined
注:每週循環覆蓋;若是須要保留少許日誌,供sa等使用,不做爲特殊其餘信息分析等,能夠按周輪詢,免去擔憂空間問題。負載均衡
按月輪詢:工具
CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_blog_%Y%m.log" combined CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%Y%m.log" combined
按天+按小時輪詢:測試
CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_blog_%Y%m%d.log" combined CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_blog_%Y%m%d%H.log" combined CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%Y%m%d.log" combined CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%Y%m%%d%H.log" combined
.....能夠自由組合來輪詢日誌。spa
下面以按天輪詢日誌的測試配置:
[root@bqh-119 extra]# vim httpd-vhosts.conf ......以上省略 <VirtualHost *:80> ServerAdmin 1147076062@qq.com DocumentRoot "/var/html/blog" ServerName blog.bqh123.com ServerAlias bg.bqh123.com ErrorLog "logs/blog-error_log" CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_blog_%Y%m%d.log" combined </VirtualHost> <VirtualHost *:80> ServerAdmin 1147076062@qq.com DocumentRoot "/var/html/bbs" ServerName bbs.bqh123.com ServerAlias bs.bqh123.com ErrorLog "logs/bbs-error_log" CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%Y%m%d.log" combined </VirtualHost>
刷新配置:
[root@bqh-119 extra]# vim httpd-vhosts.conf [root@bqh-119 extra]# ../../bin/apachectl -t Syntax OK [root@bqh-119 extra]# ../../bin/apachectl graceful
訪問測試,並查看日誌:
[root@bqh-119 logs]# ll 總用量 40 -rw-r--r-- 1 root root 206 7月 15 22:34 access_bbs_20190715.log -rw-r--r-- 1 root root 591 7月 15 23:10 access_blog_20190715.log -rw-r--r-- 1 root root 1419 7月 14 21:52 access_log -rw-r--r-- 1 root root 805 7月 14 22:11 bbs-access_log -rw-r--r-- 1 root root 340 7月 14 21:27 bbs-error_log -rw-r--r-- 1 root root 1074 7月 15 21:36 blog-access_log -rw-r--r-- 1 root root 219 7月 14 20:02 blog-error_log srwx------ 1 daemon root 0 7月 14 23:29 cgisock.1343 srwx------ 1 daemon root 0 7月 15 22:23 cgisock.1625 srwx------ 1 daemon root 0 7月 13 23:40 cgisock.58405 -rw-r--r-- 1 root root 5941 7月 15 22:23 error_log -rw-r--r-- 1 root root 5 7月 15 22:23 httpd.pid [root@bqh-119 logs]# tail -2 ./access_blog_20190715.log 192.168.0.105 - - [15/Jul/2019:22:35:07 +0800] "GET / HTTP/1.1" 200 23 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0" [root@bqh-119 logs]# tail -2 ./access_bbs_20190715.log 192.168.0.105 - - [15/Jul/2019:22:34:45 +0800] "GET / HTTP/1.1" 200 22 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
apache不記錄圖片的日誌:
程序配置:
<FilesMatch 「\.(css|js|gif|jpg|ico|swf)」> SetEnv IMAG 1 </FilesMatch>
日誌配置: <VirtualHost *:80> ServerAdmin 1147076062@qq.com DocumentRoot "/var/html/bbs" ServerName bbs.bqh123.com ServerAlias bs.bqh123.com ErrorLog "logs/bbs-error_log" CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%Y%m%d.log" combined env=!dontlog
RS服務器不記錄負載均衡健康檢查日誌(check.html):
<VirtualHost *:80> ServerAdmin 1147076062@qq.com DocumentRoot "/var/html/bbs" ServerName bbs.bqh123.com ServerAlias bs.bqh123.com SetEnvIf Request_URI 「^/check\.html$」 dontlog ErrorLog "logs/bbs-error_log" CustomLog "|/usr/local/sbin/cronolog /application/apache/logs/access_bbs_%Y%m%d.log" combined env=!dontlog </VirtualHost>
統計apache日誌單IP訪問請求數排名:
[root@bqh-119 logs]# awk '{print $1}' ./access_bbs_20190715.log |sort|uniq -c|sort -rn -k1 114 192.168.0.105 93 192.168.0.200 42 192.168.0.88 32 192.168.0.109 22 192.168.0.107 12 192.168.0.10 1 192.168.0.96 1 192.168.0.5 1 192.168.0.222 1 192.168.0.15 1 192.168.0.110 [root@bqh-119 logs]# awk '{++s[$1]} END {for (key in s) print s[key],key}' access_bbs_20190715.log |sort -rn -k1 144 192.168.0.105 93 192.168.0.200 42 192.168.0.88 32 192.168.0.109 22 192.168.0.107 12 192.168.0.10 1 192.168.0.96 1 192.168.0.5 1 192.168.0.222 1 192.168.0.15 1 192.168.0.110