如何利用Debian Syslog分析系统性能

<code>sudo systemctl status rsyslog</code>

<code>sudo systemctl start rsyslog</code>

<code>sudo nano /etc/rsyslog.conf</code>

<code># Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.*                                                 /dev/console
& ~                                                 # 抑制所有内核消息
<h1>Log anything (except mail) of level info or higher.</h1><h1>Don't log private authentication messages!</h1><p>*.info;mail.none;authpriv.none;cron.none                /var/log/syslog</p><h1>The authpriv file has restricted access.</h1><p>authpriv.*                                              /var/log/secure</p><h1>Log all the mail messages in one place.</h1><p>mail.*                                                  -/var/log/maillog</p><h1>Log cron stuff</h1><p>cron.*                                                  /var/log/cron.log</p><h1>Everybody gets emergency messages</h1><p><em>.emerg                                                 </em></p>
                    <div class="aritcle_card">
                        <a class="aritcle_card_img" href="/ai/973">
                            <img src="https://img.php.cn/upload/ai_manual/000/000/000/175680175849948.png" alt="知网AI智能写作">
                        </a>
                        <div class="aritcle_card_info">
                            <a href="/ai/973">知网AI智能写作</a>
                            <p>知网AI智能写作，写文档、写报告如此简单</p>
                            <div class="">
                                <img src="/static/images/card_xiazai.png" alt="知网AI智能写作">
                                <span>38</span>
                            </div>
                        </div>
                        <a href="/ai/973" class="aritcle_card_btn">
                            <span>查看详情</span>
                            <img src="/static/images/cardxiayige-3.png" alt="知网AI智能写作">
                        </a>
                    </div>
                <h1>Save news errors of level crit and higher in a special file.</h1><p>uucp,news.crit                                          /var/log/spooler</p><h1>Save boot messages also to boot.log</h1><p>local7.*                                                /var/log/boot.log</code>

<code>sudo journalctl -xe</code>

<code>sudo journalctl --since "2023-04-01" --until "2023-04-30"</code>

<code>sudo journalctl -u rsyslog.service | grep "CPU usage"</code>

<code>sudo journalctl -u rsyslog.service | grep "memory usage"</code>