{"id":1368,"date":"2024-09-06T08:32:34","date_gmt":"2024-09-06T00:32:34","guid":{"rendered":"http:\/\/blue.yn.cn\/?p=1368"},"modified":"2024-09-06T08:54:59","modified_gmt":"2024-09-06T00:54:59","slug":"%e7%bd%91%e7%bb%9c%e8%ae%be%e5%a4%87%e6%97%a5%e5%bf%97%e6%94%b6%e9%9b%86%e5%92%8c%e5%a4%84%e7%90%86","status":"publish","type":"post","link":"http:\/\/blue.yn.cn\/?p=1368","title":{"rendered":"\u7f51\u7edc\u8bbe\u5907\u65e5\u5fd7\u6536\u96c6\u548c\u5904\u7406"},"content":{"rendered":"<h3>\u7f51\u7edc\u8bbe\u5907\u914d\u7f6e<\/h3>\n<ul>\n<li>\u534e\u4e3a<\/li>\n<\/ul>\n<pre><code class=\"language-bash\">info-center loghost source Vlanifxxx\ninfo-center loghost x.x.x.x facility local6 local-time<\/code><\/pre>\n<ul>\n<li>\u534e\u4e09<\/li>\n<\/ul>\n<pre><code class=\"language-bash\"> info-center loghost source Vlan-interfacexxx\n info-center loghost vpn-instance wangguan x.x.x.x facility local5<\/code><\/pre>\n<h3>rsyslog\u914d\u7f6e<\/h3>\n<pre><code class=\"language-bash\">vim \/etc\/rsyslog.conf\n$template h3c,&quot;\/var\/log\/network\/h3c\/%$YEAR%_%$MONTH%_%$DAY%-%FROMHOST-IP%.log&quot;\nlocal5.* ?h3c\n$template huawei,&quot;\/var\/log\/network\/huawei\/%$YEAR%_%$MONTH%_%$DAY%-%FROMHOST-IP%.log&quot;\nlocal6.* ?huawei\n\ncrontab -l\n#\u6bcf\u5929\u51cc\u66683\u70b9\u6267\u884c\u5220\u9664f5000session\u3001h3c\u3001huawei\u7f51\u7edc\u8bbe\u5907\u65e5\u5fd7\uff1bby:yujing 2024\/8\/7\n00 03 * * * bash -x \/opt\/delete_session_log.sh &amp;&gt; \/tmp\/delete.log\n\ncat \/opt\/delete_session_log.sh\n# \u83b7\u53d6\u5f53\u5929\u65e5\u671f\uff0c\u5e76\u683c\u5f0f\u5316\u4e3afind\u9700\u8981\u7684\u683c\u5f0f\nTODAY=$(date +&#039;%Y-%m-%d&#039;)\n\nfind \/firewall\/f5000session\/ -type f -name &quot;*.log&quot;  ! -newermt &quot;$TODAY&quot;   | xargs rm -f\nfind \/var\/log\/network\/huawei\/ -type f -name &quot;*.log&quot;  -mtime +1   | xargs rm -f\nfind \/var\/log\/network\/h3c\/ -type f -name &quot;*.log&quot;  -mtime +1   | xargs rm -f<\/code><\/pre>\n<p>\u91cd\u542f<code>rsyslog<\/code>\u670d\u52a1<br \/>\n<code>systemctl restart rsyslog<\/code><\/p>\n<h3>elastic\u914d\u7f6e\uff08\u5728kibana\u4e0a\u914d\u7f6e\uff09<\/h3>\n<ol>\n<li>\u914d\u7f6e\u7d22\u5f15\u6a21\u677f<code>networks-template<\/code><\/li>\n<\/ol>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/2024\/09\/image-1725583844780.png\" alt=\"file\" \/><\/p>\n<ol start=\"2\">\n<li>\u7d22\u5f15\u7ba1\u7406<br \/>\n\u914d\u7f6e\u597d\u540e\u5728\u7d22\u5f15\u7ba1\u7406\u4e0a\u4f1a\u770b\u5230\u540d\u79f0\u4e3a<code>networks-huawei-2024.09.06<\/code>\u548c<code>networks-h3c-2024.09.06<\/code>\u7684\u7d22\u5f15<\/li>\n<\/ol>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/2024\/09\/image-1725583983920.png\" alt=\"file\" \/><\/p>\n<p>\u7136\u540e\u6dfb\u52a0\u597d<code>networks-h*<\/code>\u7684\u7d22\u5f15\u6a21\u5f0f<\/p>\n<ol start=\"3\">\n<li><code>discover<\/code>\u83dc\u5355<\/li>\n<\/ol>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/2024\/09\/image-1725584092528.png\" alt=\"file\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u7f51\u7edc\u8bbe\u5907\u914d\u7f6e \u534e\u4e3a info-center loghost source Vlanifxxx info-cen&#8230; &raquo; <a class=\"read-more-link\" href=\"http:\/\/blue.yn.cn\/?p=1368\">\u9605\u8bfb\u5168\u6587<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[],"class_list":["post-1368","post","type-post","status-publish","format-standard","hentry","category-elk"],"_links":{"self":[{"href":"http:\/\/blue.yn.cn\/index.php?rest_route=\/wp\/v2\/posts\/1368","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/blue.yn.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/blue.yn.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/blue.yn.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/blue.yn.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1368"}],"version-history":[{"count":2,"href":"http:\/\/blue.yn.cn\/index.php?rest_route=\/wp\/v2\/posts\/1368\/revisions"}],"predecessor-version":[{"id":1373,"href":"http:\/\/blue.yn.cn\/index.php?rest_route=\/wp\/v2\/posts\/1368\/revisions\/1373"}],"wp:attachment":[{"href":"http:\/\/blue.yn.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1368"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/blue.yn.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1368"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/blue.yn.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1368"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}