问题描述
我试图在 Ubuntu 10.04.02 LTS(服务器版)上对 syslogd 进行一些更改。我发现系统上不存在 /etc/syslog.conf，而是 /etc/rsyslogd.d/*.conf。 syslogd可以通过安装inetutils-syslogd来安装，但是我无法判断这两个系统的优劣。此外，在安装 inetutils-syslogd 时，我需要删除 rsyslog 和 ubuntu-minimal。有人会解释 rsyslogd 相对于 syslogd 的优点和 de-merits 吗？
最佳方法
rsyslogd 的 Ubuntu 联机帮助页说明了这一点
\\n
… First of all there has been a systematic attempt to\\n insure that rsyslogd follows its default, standard BSD behavior…
\\n rsyslogd should be able to use a\\n standard syslog.conf and act like the orginal syslogd. However, an\\n original syslogd will not work correctly with a rsyslog-enhanced\\n configuration file. At best, it will generate funny looking file names.
\\n The second important concept to note is that this version of rsyslogd\\n interacts transparently with the version of syslog found in the\\n standard libraries. If a binary linked to the standard shared\\n libraries fails to function correctly we would like an example of the\\n anomalous behavior.
\\n
所以 rsyslogd 与 syslogd 没有太大区别。那我们为什么需要rsyslogd呢？
此页面提供了 rsyslogd 与 syslogd-ng 的比较图表
这篇博文解释了为什么要使用第二个 syslogd？。摘录自：
\\n
\\n
.. So one reason the world needs another syslogd is that it needs another major player in the *nix space. I honestly believe there is none except syslog-ng..
\\n
.. have you noticed that syslog-ng has become dual-licensed? There is the great GPLed open source release and the even greater “Premium Edition”, which cost money. Only the premium edition offers features like native database and SSL support or queued syslog sending..
\\n
..”Stop”, I hear some say, “syslog-ng is GPLed, so we can take that source and implement the missing features”. Of course you can. But do you think Balabit will actually include your patches? I guess we can agree on “nope”. So you have just forked from syslog-ng … and proved my argument that the world needs another syslogd..
\\n
.. So – why does the world need another syslogd?
\\xa0\\xa0\\xa0\\xa0\\xa0\\xa0\\xa0\\xa0\\xa0\\xa0\\xa0\\xa0It needs one that aims to be a real major player, being installed on a lot of systems. That will help to get the best out of syslog technology (and in the long term the best of logging at all). Either in its project itself of by driving competitors to be better than it. A new major player will prevent monocultures and provide a rich freedom of choice. That’s why the world needs it.
\\n
\\n
次佳方法
此答案中没有深入比较。
您看过 rsyslogd 手册页了吗？
它说 rsyslogd 是 syslogd 的扩展。此外，它是 Ubuntu 使用的标准，所以我建议继续使用它。