<pre name="code" class="html">jrhapt11:/root# ps -ef | grep rsyslog root 8233 1 0 17:42 ? 00:00:00 /sbin/rsyslogd -i /var/run/syslogd.pid root 8342 8147 0 17:43 pts/1 00:00:00 grep rsyslog jrhapt11:/root# kill -9 8233 You have mail in /var/spool/mail/root jrhapt11:/root# service rsyslog start Starting system logger: [ OK ] jrhapt11:/root# 这种方式 日志会全部重发 /*** jrhapt11:/root# service rsyslog stop Shutting down system logger: [ OK ] jrhapt11:/root# service rsyslog start Starting system logger: [ OK ] 这种情况日志不会重发 /*****测试； jrhwpt01:/root# ps -ef | grep rsyslog root 8504 8375 0 17:59 pts/1 00:00:00 grep rsyslog root 22665 1 0 15:54 ? 00:00:00 /sbin/rsyslogd -i /var/run/syslogd.pid jrhwpt01:/root# cd /var/log/nginx/ jrhwpt01:/var/log/nginx# wc -l error.log 26 error.log jrhwpt01:/var/log/nginx# kill -9 22665 jrhwpt01:/var/log/nginx# wc -l error.log 26 error.log jrhwpt01:/var/log/nginx# ps -ef | grep rsyslog root 8534 8375 0 17:59 pts/1 00:00:00 grep rsyslog jrhwpt01:/var/log/nginx# service rsyslog start Starting system logger: [ OK ] jrhwpt01:/var/log/nginx# ps -ef | grep rsyslog root 8545 1 0 17:59 ? 00:00:00 /sbin/rsyslogd -i /var/run/syslogd.pid root 8561 8375 0 17:59 pts/1 00:00:00 grep rsyslog [root@dr-mysql01 zjzc_log]# cat zj-frontend01-error.2016-09-26 [root@dr-mysql01 zjzc_log]# cat zj-frontend01-error.2016-09-26 2016/09/26 16:04:04 [error] 23060#0: *1325 open() "/var/www/zjzc-web-frontEnd/favicon.ico" failed (2: No such file or directory), client: 10.171.246.184, server: localhost, request: "GET /favicon.ico HTTP/1.1", host: "www.zjcap.cn", referrer: "https://www.zjcap.cn/wechat/home.html?useragent=android_h5_zjcap&apiver=2" 2016/09/26 16:05:01 [error] 23060#0: *1364 open() "/var/www/zjzc-web-frontEnd/favicon.ico" failed (2: No such file or directory), client: 10.171.246.184, server: localhost, request: "GET /favicon.ico HTTP/1.1", host: "www.zjcap.cn", referrer: "https://www.zjcap.cn/wechat/safe.html?useragent=android_h5_zjcap" 2016/09/26 16:21:06 [error] 23060#0: *1406 open() "/var/www/zjzc-web-frontEnd/favicon.ico" failed (2: No such file or directory), client: 10.252.142.174, server: localhost, request: "GET /favicon.ico HTTP/1.1", host: "www.zjcap.cn" 2016/09/26 16:25:06 [error] 23060#0: *1433 open() "/var/www/zjzc-web- /***** 此时rsyslog 服务器上: [root@dr-mysql01 zjzc_log]# grep '2016/09/26 16:04:04' zj-frontend01-error.2016-09-26 2016/09/26 16:04:04 [error] 23060#0: *1325 open() "/var/www/zjzc-web-frontEnd/favicon.ico" failed (2: No such file or directory), client: 10.171.246.184, server: localhost, request: "GET /favicon.ico HTTP/1.1", host: "www.zjcap.cn", referrer: "https://www.zjcap.cn/wechat/home.html?useragent=android_h5_zjcap&apiver=2" kill进程: jrhwpt01:/var/log/nginx# ps -ef | grep rsyslog root 8545 1 0 17:59 ? 00:00:00 /sbin/rsyslogd -i /var/run/syslogd.pid root 9485 8375 0 18:05 pts/1 00:00:00 grep rsyslog You have mail in /var/spool/mail/root jrhwpt01:/var/log/nginx# kill -9 8545 jrhwpt01:/var/log/nginx# ps -ef | grep rsyslog root 9487 8375 0 18:05 pts/1 00:00:00 grep rsyslog jrhwpt01:/var/log/nginx# service rsyslog start Starting system logger: [ OK ] [root@dr-mysql01 zjzc_log]# grep '2016/09/26 16:04:04' zj-frontend01-error.2016-09-26 2016/09/26 16:04:04 [error] 23060#0: *1325 open() "/var/www/zjzc-web-frontEnd/favicon.ico" failed (2: No such file or directory), client: 10.171.246.184, server: localhost, request: "GET /favicon.ico HTTP/1.1", host: "www.zjcap.cn", referrer: "https://www.zjcap.cn/wechat/home.html?useragent=android_h5_zjcap&apiver=2" [root@dr-mysql01 zjzc_log]# grep '2016/09/26 16:04:04' zj-frontend01-error.2016-09-26 2016/09/26 16:04:04 [error] 23060#0: *1325 open() "/var/www/zjzc-web-frontEnd/favicon.ico" failed (2: No such file or directory), client: 10.171.246.184, server: localhost, request: "GET /favicon.ico HTTP/1.1", host: "www.zjcap.cn", referrer: "https://www.zjcap.cn/wechat/home.html?useragent=android_h5_zjcap&apiver=2" 2016/09/26 16:04:04 [error] 23060#0: *1325 open() "/var/www/zjzc-web-frontEnd/favicon.ico" failed (2: No such file or directory), client: 10.171.246.184, server: localhost, request: "GET /favicon.ico HTTP/1.1", host: "www.zjcap.cn", referrer: "https://www.zjcap.cn/wechat/home.html?useragent=android_h5_zjcap&apiver=2" 此时之前的日志也会同步一份