linux+记录系统异常日志

dmesg | tail
journalctl -xe

/etc/logrotate.conf

/var/log/syslog {
    daily
    missingok
    rotate 7
    compress
    delaycompress
    notifempty
    create 0640 root adm
}

tail -f /var/log/syslog

# 在/etc/rsyslog.conf中添加以下行
*.* @remote_server_ip:514

chmod 640 /var/log/syslog
cp /var/log/syslog /backup/

import subprocess
import smtplib
from email.mime.text import MIMEText

def check_logs():
    result = subprocess.run(['journalctl', '-p', '3,-1'], capture_output=True, text=True)
    logs = result.stdout
    if "error" in logs.lower():
        send_email(logs)

def send_email(log_content):
    msg = MIMEText(log_content)
    msg['Subject'] = 'System Error Alert'
    msg['From'] = 'admin@example.com'
    msg['To'] = 'sysadmin@example.com'

    smtp_server = smtplib.SMTP('smtp.example.com')
    smtp_server.send_message(msg)
    smtp_server.quit()

if __name__ == "__main__":
    check_logs()