1:root身份打开 /etc/rsyslog.d/50-default.conf
2:把注释#去掉
#*.=info;*.=notice;*.=warn;\ # auth,authpriv.none;\ # cron,daemon.none;\ # mail,news.none -/var/log/messages
3:重启后ok
sudo restart rsyslog