Nginx访问日志
Nginx访问日志
日志格式
1.查看nginx.conf文件
[root@antong ~]# vim /usr/local/nginx/conf/nginx.conf //搜索log_format
log_format test '$remote_addr $http_x_forwarded_for [$time_local]'
' $host "$request_uri" $status'
' "$http_referer" "$http_user_agent"';
| $remote_addr | 客户端IP(公网IP) |
|---|---|
| $http_x_forwarded_for | 代理服务器的IP |
| $time_local | 服务器本地时间 |
| $host | 访问主机名（域名） |
| $request_uri | 访问的url地址 |
| $status | 状态码 |
| $http_referer | referer |
| $http_user_agent | user_agent |
2.定义日志文件
[root@antong ~]# vim /usr/local/nginx/conf/vhost/test.com.conf
server
{
listen 80;
server_name test.com test1.com test2.com;
index index.html index.htm index.php;
root /data/wwwroot/test.com;
if ($host != 'test.com' ) {
rewrite ^/(.*)$ http://test.com/$1 permanent;
}
access_log /tmp/test.com.log test; //分号前面的test是在nginx.conf定义的格式名字
}
[root@antong ~]# /usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
[root@antong ~]# /usr/local/nginx/sbin/nginx -s reload
3.测试
[root@antong ~]# curl -x127.0.0.1:80 test2.com
<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.17.8</center>
</body>
</html>
[root@antong ~]# curl -x127.0.0.1:80 test1.com
<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.17.8</center>
</body>
</html>
[root@antong ~]# cat /tmp/test.com.log
127.0.0.1 - [06/Sep/2021:02:57:26 -0400] test2.com "/" 301 "-" "curl/7.29.0"
127.0.0.1 - [06/Sep/2021:02:57:43 -0400] test2.com "/" 301 "-" "curl/7.29.0"
127.0.0.1 - [06/Sep/2021:03:01:37 -0400] test2.com "/" 301 "-" "curl/7.29.0"
127.0.0.1 - [06/Sep/2021:03:01:41 -0400] test1.com "/" 301 "-" "curl/7.29.0"
127.0.0.1 - [06/Sep/2021:03:02:05 -0400] test1.com "/" 301 "-" "curl/7.29.0"
日志切割
因为nginx不像apache自带日志切割的工具，需要借助系统的切割工具和自己写切割脚本
1.创建shell脚本来切割
[root@antong ~]# vim /usr/local/sbin/nginx_log_rotate.sh //脚本文件一般放在这个目录
#! /bin/bash
## 假设nginx的日志存放路径为/data/logs/
d=`date -d "-1 day" +%Y%m%d`
logdir="/data/logs"
nginx_pid="/usr/local/nginx/logs/nginx.pid"
cd $logdir
for log in `ls *.log`
do
mv $log $log-$d
done
/bin/kill -HUP `cat $nginx_pid`
2.查看日志
[root@antong ~]# sh -x /usr/local/sbin/nginx_log_rotate.sh
++ date -d '-1 day' +%Y%m%d
+ d=20210905
+ logdir=/tmp
+ nginx_pid=/usr/local/nginx/logs/nginx.pid
+ cd /tmp
++ ls test.com.log
+ for log in '`ls *.log`'
+ mv test.com.log test.com.log-20210905
++ cat /usr/local/nginx/logs/nginx.pid
+ /bin/kill -HUP 923
[root@antong ~]# ls /tmp/
mysql.sock
pear
php-fcgi.sock
systemd-private-048ae85709794057a15ef8d9867fc1b8-chronyd.service-OdDwEK
systemd-private-c0bc30f50f5147fd8800b9ab1eaabe96-chronyd.service-g5fWDA
test.com.log
test.com.log-20210905
3.清理日志
[root@antong ~]# find /tmp/ -name *.log-* -type f -mtime +7 | xargs rm
//删除七天以上的日志文件
