默认的时间戳格式是
bash
Jul 14 13:30:01 localhost systemd: Starting Session 38 of user root.
看着不是很方便,现修改成如下格式
ide
2018-07-14 13:32:57 desktop0 systemd: Starting System Logging Service...
修改 /etc/rsyslog.conf rest
# Use default timestamp format #$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat # 这行是原来的将它注释,添加下面两行 $template CustomFormat,"%$NOW% %TIMESTAMP:8:15% %HOSTNAME% %syslogtag% %msg%\n" $ActionFileDefaultTemplate CustomFormat
而后重启 rsyslog 服务orm
systemctl restart rsyslog.service