nginx:

nginx1.7版本支持直接在配置中發(fā)送syslog:

access_log? syslog:server=ip:514,facility=local5,severity=info,tag=accessyymac? main;

error_log syslog:server=ip:514,facility=local5,severity=info,tag=errorngmac ?notice;

不過在測試過程中，發(fā)現(xiàn)有時候send()失敗會轉(zhuǎn)化成error

php-fpm:(僅啟動)

error_log = syslog;

syslog.facility = local5

syslog.ident = phpfpm ##tag

php:

openlog("tag", NULL, LOG_LOCAL5);//制定tag，facility

syslog(LOG_DEBUG,$message);//制定level

closelog();

file:

/etc/rsyslog.conf,加載imfile模塊

module(load="imfile")

/etc/rsyslog.d/error.conf:

input(type="imfile"

File="/data/log/error.log"

Tag="errorng87v8error"

Severity="debug"

Facility="local5")