在某种程度上,这是有效的,我不知道会发生什么改变。没有日志发送到 TFTP 文件夹,而是我只看到下面发布的错误消息。我尝试重新启动服务器。我可以更改端口号,它将成功启动,但如果这样做我将不会收到任何日志。
检查状态时出错:
rsyslogd[19552]: Could not create tcp listener, ignoring port 514 bind-address (null). [v8.24.0-34.el7 try http://www.rsyslog.com/e/2077 ]
Run Code Online (Sandbox Code Playgroud)
/etc/rsyslog.conf
#### MODULES ####
$ModLoad imuxsock # provides support for local system logging (e.g. via logger command)
$ModLoad imjournal # provides access to the systemd journal
$ModLoad imudp
$UDPServerRun 514
$ModLoad imtcp
$InputTCPServerRun 514
#### GLOBAL DIRECTIVES ####
$WorkDirectory /var/lib/rsyslog
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
#$ActionFileEnableSync on
$IncludeConfig /etc/rsyslog.d/*.conf
$OmitLocalLogging on
$IMJournalStateFile imjournal.state
#### RULES ####
input(type="imudp" port="514" ruleset="f_remote_all")
input(type="imtcp" port="514" ruleset="f_remote_all")
template(name="d_catch_all" type="string" …
Run Code Online (Sandbox Code Playgroud)