System Logging and NTP

Question 1

What is the format of a rsyslog rule?

Answer 1

■ facility.severity location

■ EX: mail.* /var/log/maillog

Question 2

What journalctl option mimicks ‘tail -f’

Answer 2

■ journalctl -f

Question 3

How can journald logs be made persistent?

Answer 3

1. Create a /var/log directory for journald.service
   ]# mkdir -p /var/log/journal
2. Change ownership to root:systemd-journal
   ]# chown root:systemd-journal /var/log/journal
3. Set permissions on /var/log/journal
   ]# chmod 2775 /var/log/journal
4. Tell journald to reopen its log files
   ]# killall -USR1 systemd-journald

Question 4

What command shows an overview of the current time-related system settings?

Answer 4

■ timedatectl [status]

Question 5

Where can a list of available timezones be found?

Answer 5

■ timedatectl list-timezones

Question 6

What command will assist in finding the correct time zone?

Answer 6

■ tzselect

Question 7

How can a message with a severity be sent to test rsyslogd configurations?

Answer 7

■ logger -p [facility.severity] “message to be logged”

■ EX: logger -p authpriv.alert “Logging test authpriv.alert”