一步一步教你日志切割与分析AWStats监控

Apache应用配置日志

拓扑图：

1）在Cenost01上配置apache配置网站，修改apache网站根目录设置/www/设置主页

2）在Centos02上安装DNS使用域名​​www.stz.com​​访问日志

3）在Centos01上安装中AWStats监控apache访问

4）在Centos01配置访问AWstats监控页面使用基本验证访问未经授权用户查看监控后台

5）在Centos01上配置安装cronolog日志分析工具及安装每天生成日志

1、在Centos01上配置安装apache

1）挂载光盘

[

root@centos01 ~]# mount /dev/cdrom /mnt/
mount: 在 /dev/sr0 上找不到媒体

2）解压安装包到/usr/src目录下

[root@centos01 ~]# tar zxf /mnt/httpd-2.2.17.tar.gz -C /usr/src/

3）切换目录然后配置httpd

[root@centos01 httpd-2.2.17]# ./configure 
--prefix=/usr/local/httpd --enable-so --enable-rewrite --enable-charset-lite
--enable-cgi

4）编译安装httpd

[root@centos01 httpd-2.2.17]# make && make install

5）查看安装上httpd没有

[root@centos01 httpd-2.2.17]# ls /usr/local/
bin  games  include  lib64   sbin   srcetc httpd  lib      libexec share

6）生成服务控制文件

[root@centos01 ~]# cp /usr/local/httpd/bin/apachectl /etc/init.d/httpd

7）这个文件默认没有权限，需要添加执行权限

[root@centos01 ~]# chmod +x /etc/init.d/httpd

8）优化一下

[root@centos01 ~]# ln -s /usr/local/httpd/bin/* /usr/local/bin

9）编辑一下httpd文件

[root@centos01 ~]# vim /etc/init.d/httpd
#!/bin/sh
#chkconfig:35 80 21
#description:Apache Server

10）检查一下修改是否报错

[root@centos01 ~]# chkconfig --add httpd

11）设置apache服务开机自动启动

[root@centos01 ~]# chkconfig --level 35 httpd on

12）检测一下是否出现问题（后面有一个ok’就是没问题）

[root@centos01 ~]# httpd -t
httpd: Could not reliably determine the
server's fully qualified domain name, using fe80::20c:29ff:fecd:d0a for
ServerName
Syntax OK

13）备份apache主配置文件，防止配置出现错误

[root@centos01 ~]# cp /usr/local/httpd/conf/httpd.conf /usr/local/httpd/conf/httpd.conf.bak

14）配置apache主配置文件开启保持连接功能

[root@centos01 ~]# vim
/usr/local/httpd/conf/httpd.conf
（配置内容，前面数字是行号）
398 Include conf/extra/httpd-default.conf

15）查看是否错误

[root@centos01 ~]# httpd -t
httpd: Could not reliably determine the
server's fully qualified domain name, using fe80::20c:29ff:fecd:d0a for
ServerName
Syntax OK

16）修改保持配置文件功能

[root@centos01 ~]# vim
/usr/local/httpd/conf/extra/httpd-default.conf
Timeout 3                     （超时时间设置为3秒）
KeepAlive On                  （开启保持连接功能）
KeepAliveTimeout 5            （一次连接多次请求间隔时间）
MaxKeepAliveRequests 1000     （保持连接最大并发数）

17）重新启动httpd服务

[root@centos01 ~]# systemctl restart httpd

18）设置www网站和配置

[root@centos01 ~]# mkdir /www
[root@centos01 ~]# echo "www.stz.com" > /www/index.html
[root@centos01 ~]# vim /usr/local/httpd/conf/httpd.conf
105 DocumentRoot "/www"
133 <Directory "/www">
134     Options Indexes FollowSymLinks
135     AllowOverride None
136     Order allow,deny
137     Allow from all
138 </Directory>

19）配置完成检查是否错误

[root@centos01 ~]# httpd -t
httpd: Could not reliably determine the
server's fully qualified domain name, using fe80::20c:29ff:fecd:d0a for
ServerName
Syntax OK

20）重新启动httpd

[root@centos01 ~]# systemctl restart httpd

21）在win10客户端上配置ip和DNS

22）访问ip查看内容

2、在Centso02上安装DNS查看网址日志

1）在Centos01和02上配置DNS

[root@centos01 ~]# vim /etc/sysconfig/network-scripts/ifcfg-ens32
TYPE=Ethernet
BOOTPROTO=static
NAME=ens32
DEVICE=ens32
ONBOOT=yes
IPADDR=192.168.100.10
NETMASK=255.255.255.0
DNS1=192.168.100.20

[root@centos02 ~]# vim /etc/sysconfig/network-scripts/ifcfg-ens32
TYPE=Ethernet
BOOTPROTO=static
NAME=ens32
DEVICE=ens32
ONBOOT=yes
IPADDR=192.168.100.20
NETMASK=255.255.255.0
DNS1=192.168.100.20

2）挂载光盘安装依赖

[root@centos02 ~]# mount /dev/cdrom /mnt/
mount: /dev/sr0 写保护，将以只读方式挂载
[root@centos02 ~]# rpm -ivh 
/mnt/Packages/bind-9.9.4-50.el7.x86_64.rpm
[root@centos02 ~]# rpm -ivh
/mnt/Packages/bind-chroot-9.9.4-50.el7.x86_64.rpm

3）清楚named文件然后配置

[root@centos02 ~]# echo "" > /etc/named.conf 
[root@centos02 ~]# vim /etc/named.conf
options {
       
listen-on port 53 { any; };
       
directory "/var/named/";
};
zone "stz.com" IN {
       
type master;
       
file "/var/named/stz.com.zone";
};

4）查看一下有没有出错

[root@centos02 ~]# named-checkconf /etc/named.conf

5）配置文件

[root@centos02 ~]# vim /var/named/stz.com.zone
$TTL            86400
@               SOA             stz.com.      root.stz.com. (
                2023010215
                1H
                15M
                1W
                1D
)
@               NS              centos02.stz.com.
centos02        A               192.168.100.20
www             A               192.168.100.10

6）检查配置是否正确

[root@centos02 ~]# named-checkzone stz.com /var/named/stz.com.zone 
zone benet.com/IN: loaded serial 2023010215
OK

7）启动named监听一下看启动没有启动

[root@centos02 ~]# systemctl start named
[root@centos02 ~]# systemctl enable named
[root@centos02 ~]# netstat -anptu | grep
named
tcp       
0      0 192.168.100.20:53       0.0.0.0:*               LISTEN      40540/named         
tcp       
0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      40540/named         
tcp       
0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      40540/named         
tcp6      
0      0 ::1:953                 :::*                    LISTEN     
40540/named         
udp       
0      0 192.168.122.1:53        0.0.0.0:*                           40540/named         
udp       
0      0 192.168.100.20:53       0.0.0.0:*                           40540/named         
udp       
0      0 127.0.0.1:53            0.0.0.0:*                           40540/named

8）查看是否能解析出

[root@centos02 ~]# nslookup www.stz.com
Server:           192.168.100.20
Address: 192.168.100.20#53
 
Name:    www.stz.com
Address: 192.168.100.10

9）客户端使用域名访问

3、apahce配置日志切割

1）首先先查看日志保存在哪里

[root@centos01 ~]# ls /usr/local/httpd/logs/
access_log 
error_log  httpd.pid

2）创建存储归档日志目录

[root@centos01 ~]# mkdir /apache_log

3）修改apahce主配置文件配置为每天切割一次成功和失败日志

[root@centos01 ~]# which rotatelogs /usr/local/bin/rotatelogs
[root@centos01 ~]# vim /usr/local/httpd/conf/httpd.conf
166 ErrorLog "| /usr/local/bin/rotatelogs -l /apache_log/www.stz.com.error_%Y%m%d.log 86400"
196    CustomLog "| /usr/local/bin/rotatelogs -l /apache_log/www.stz.com-access_%Y%m%d.log 86400" common

4）检查配置是否出错

[root@centos01 ~]# httpd -t
httpd: Could not reliably determine the
server's fully qualified domain name, using fe80::20c:29ff:fecd:d0a for
ServerName
Syntax OK

5）重新启动apahce服务（如果第一次报错，多试次试试）

[root@centos01 ~]# systemctl restart httpd
[root@centos01 ~]# netstat -anptu | grep httpd
tcp6      
0      0 :::80                   :::*                    LISTEN      93350/httpd

6）修改一下时间

[root@centos01 ~]# date -s 02/02/2023
2023年 02月 02日 星期四

7）查看一下日志

[root@centos01 ~]# ls /apache_log/
www.stz.com.error_20230203.log

8）删除日志

[root@centos01 ~]# rm -rf /apache_log/*
[root@centos01 ~]# ls /apache_log/

9）在重新启动一下

[root@centos01 ~]# systemctl restart httpd

10）查看日志

[root@centos01 ~]# date -s 02/04/2023
2023年 02月 04日 星期六
[root@centos01 ~]# ls /apache_log/
www.stz.com.error_20230202.log

11）用客户端访问然后查看日志

[root@centos01 ~]# ls /apache_log/
www.stz.com-access_20230204.log  www.stz.com.error_20230202.log

12）安装日志切割软件

[root@centos01 ~]# tar zxf /mnt/cronolog-1.6.2.tar.gz -C /usr/src/
[root@centos01 ~]# cd /usr/src/cronolog-1.6.2/
[root@centos01 cronolog-1.6.2]# ./configure && make && make install

13）修改apache主配置文件

[root@centos01 ~]# vim /usr/local/httpd/conf/httpd.conf
ErrorLog "| /usr/local/sbin/cronolog -l /apache_log/www.stz.com.error_%Y%m%d.log 86400"
CustomLog "| /usr/local/sbin/cronolog -l /apache_log/www.stz.com-access_%Y%m%d.log 86400" common

14）检查配置文件

[root@centos01 ~]# httpd -t
httpd: Could not reliably determine the
server's fully qualified domain name, using fe80::20c:29ff:fecd:d0a for
ServerName
Syntax OK

15）重新启动httpd

[root@centos01 ~]# systemctl restart httpd

16）查看日志

[root@centos01 ~]# ls /apache_log/
www.stz.com.error_%Y%m%d.log

4、AWStats日志分析

1）安装软件

[root@centos01 ~]# tar zxf /mnt/awstats-7.3.tar.gz -C /usr/src/
[root@centos01 ~]# mv /usr/src/awstats-7.3/ /usr/local/awstats

2）配置工具添加执行权限

[root@centos01 ~]# cd /usr/local/awstats/tools/
[root@centos01 tools]# chmod +x ./*
[root@centos01 tools]# vim /usr/local/httpd/conf/httpd.conf
ErrorLog "logs/error_log"
CustomLog "logs/access_log" common

3）配置awstats

[root@centos01 tools]#
./awstats_configure.pl
> /usr/local/httpd/conf/httpd.conf
>www.stz.com）

（后面点任意键）

4）修改Awstats配置文件

[root@centos01 tools]# vim /etc/awstats/awstats.www.stz.com.conf
50  LogFile="/usr/local/httpd/logs"              （指定apache日志位置）
203 DirData="/var/lib/awstats"                   （数据存储的位置）

5）创建awstats数据存储目录

[root@centos01 tools]# mkdir /var/lib/awstats

5、配置AWStats采集日志

1）更新apache日志

[root@centos01 tools]#./awstats_updateall.pl now
[root@centos01 tools]# cd

2）设置计划任务每间隔两分钟更新一次

[root@centos01 ~]# crontab -e
*/2    *       *       *      *       /usr/local/awstats/tools/awstats_updateall.pl

3）客户端查看

4）配置页面跳转

[root@centos01 tools]# vim
/www/awstats.html
<html>
<head>
<meta http-equiv=refresh content="0; url=http://www.stz.com/awstats/awstats.pl?config=www.stz.com">
</head>
<body></body>
</html>

5）客户端展示

6、配置AWStats身份验证

1）安装软件

[root@centos01 ~]# rpm -ivh /mnt/Packages/httpd-tools-2.4.6-67.el7.centos.x86_64.rpm

2）生成验证数据库

[root@centos01 ~]# htpasswd -c /usr/local/httpd/password bob
New password: 
Re-type new password: 
Adding password for user bob
[root@centos01 ~]# htpasswd /usr/local/httpd/password tom
New password: 
Re-type new password: 
Adding password for user tom

3）修改apache主配置文件加载身份验证

[root@centos01 ~]# vim
/usr/local/httpd/conf/httpd.conf
<Directory "/usr/local/awstats/wwwroot">
   Options None
   AllowOverride None
   Order allow,deny
   Allow from all
   AuthName "access"
   AuthType Basic
   AuthUserFile /usr/local/httpd/password
   Require valid-user
</Directory>

4）查看配置是否错误

[root@centos01 ~]# httpd -t
httpd: Could not reliably determine the
server's fully qualified domain name, using fe80::20c:29ff:fecd:d0a for
ServerName
Syntax OK

5）重新启动

[root@centos01 ~]# systemctl restart httpd

7、客户端验证是否有身份验证