fedora-docs-l10n/fedora-system-administrat/rawhide/pages/monitoring-and-automation/Viewing_and_Managing_Log_Files — Chinese (Simplified) @ Fedora Weblate: See xref:Viewing_and_Managing_Log_Files.adoc#brid-Log_Files-Resources-Online[Online Documentation] for more examples of various expression-based filters. …

Translation

English type: delimited block =

Chinese (Simplified)

Needs editing

Skip

	English	Chinese (Simplified)	Actions
	The following filter selects syslog messages received from the host name `host1`:	以下过滤器选择从主机名为 `host1` 的主机接收的 syslog 消息：
	:hostname, isequal, "host1"	:hostname, isequal, "host1"
	To select syslog messages which do not contain any mention of the words `fatal` and `error` with any or no text between them (for example, `fatal lib error`), type:	要选择不包含任何提及 `fatal` 和 `error` 且它们之间有或没有任何文本的系统日志消息（例如，`fatal lib error`），请键入：
	:msg, !regex, "fatal .* error"	:msg, !regex, "fatal .* error"
	Expression-based filters	基于表达式的过滤器
	Expression-based filters select syslog messages according to defined arithmetic, Boolean or string operations. Expression-based filters use [application]rsyslogpass:attributes[{blank}]'s own scripting language called RainerScript to build complex filters.	基于表达式的过滤器根据定义的算术、布尔或字符串操作选择系统日志消息。基于表达式的过滤器使用 [application]rsyslogpass:attributes[{blank}] 自己的脚本语言 RainerScript 来构建复杂的过滤器。
	The basic syntax of expression-based filter looks as follows:	基于表达式的过滤器的基本语法如下所示：
	if _EXPRESSION_ then _ACTION_ else _ACTION_	if _EXPRESSION_ then _ACTION_ else _ACTION_
	The _EXPRESSION_ attribute represents an expression to be evaluated, for example: `$msg startswith 'DEVNAME'` or `$syslogfacility-text == 'local0'`. You can specify more than one expression in a single filter by using `and` and `or` operators.	_EXPRESSION_ 属性表示要评估的表达式，例如：`$msg startswith 'DEVNAME'` 或 `$syslogfacility-text == 'local0'`。您可以使用 `and` 和 `or` 运算符在单个过滤器中指定多个表达式。
	The _ACTION_ attribute represents an action to be performed if the expression returns the value `true`. This can be a single action, or an arbitrary complex script enclosed in curly braces.	_ACTION_ 属性表示如果表达式返回值 `true` 时要执行的操作。这可以是单个操作，也可以是用大括号括起来的任意复杂脚本。
	Expression-based filters are indicated by the keyword if at the start of a new line. The then keyword separates the _EXPRESSION_ from the _ACTION_. Optionally, you can employ the else keyword to specify what action is to be performed in case the condition is not met.	新行开头的 if 关键字指示基于表达式的过滤器。then 关键字将 _EXPRESSION_ 与 _ACTION_ 分开。您可以选择使用 else 关键字来指定在不满足条件时要执行的操作。
	With expression-based filters, you can nest the conditions by using a script enclosed in curly braces as in xref:Viewing_and_Managing_Log_Files.adoc#ex-expression-based_filters[Expression-based Filters]. The script allows you to use facility/priority-based filters inside the expression. On the other hand, property-based filters are not recommended here. RainerScript supports regular expressions with specialized functions `re_match()` and `re_extract()`.	使用基于表达式的过滤器，您可以使用用大括号括起来的脚本来嵌套条件，如 xref:Viewing_and_Managing_Log_Files.adoc#ex-expression-based_filters[Expression-based Filters] 中所示。该脚本允许您在表达式中使用 facility/priority-based 过滤器。另一方面，这里不推荐使用 property-based 过滤器。RainerScript 支持具有专用函数 `re_match()` 和 `re_extract()` 的正则表达式。
	Expression-based Filters	基于表达式的过滤器
	The following expression contains two nested conditions. The log files created by a program called prog1 are split into two files based on the presence of the "`test`" string in the message.
	if $programname == 'prog1' then { action(type="omfile" file="/var/log/prog1.log") if $msg contains 'test' then action(type="omfile" file="/var/log/prog1test.log") else action(type="omfile" file="/var/log/prog1notest.log") }	if $programname == 'prog1' then { action(type="omfile" file="/var/log/prog1.log") if $msg contains 'test' then action(type="omfile" file="/var/log/prog1test.log") else action(type="omfile" file="/var/log/prog1notest.log") }
	See xref:Viewing_and_Managing_Log_Files.adoc#brid-Log_Files-Resources-Online[Online Documentation] for more examples of various expression-based filters. RainerScript is the basis for [application]rsyslogpass:attributes[{blank}]'s new configuration format, see xref:Viewing_and_Managing_Log_Files.adoc#sec-using_the_new_configuration_format[Using the New Configuration Format]	参考 xref:Viewing_and_Managing_Log_Files.adoc#brid-Log_Files-Resources-Online[Online Documentation] 以获取更多基于表达式的过滤器的示例。RainerScript 是 [application]rsyslogpass:attributes[{blank}] 的新配置格式的基础，参见 xref:Viewing_and_Managing_Log_Files.adoc#sec-using_the_new_configuration_format[Using the New Configuration Format]。
	Actions	操作
	indexterm:[rsyslog,actions] Actions specify what is to be done with the messages filtered out by an already-defined selector. The following are some of the actions you can define in your rule:	indexterm:[rsyslog,actions] 操作指定要对已定义的选择器过滤掉的消息执行什么操作。以下是您可以在规则中定义的一些操作：
	Saving syslog messages to log files	将 syslog 消息保存到日志文件
	The majority of actions specify to which log file a syslog message is saved. This is done by specifying a file path after your already-defined selector:	大多数操作指定将 syslog 消息保存到哪个日志文件。这是通过在已定义的选择器之后指定文件路径来完成的：
	_FILTER_ _PATH_	_FILTER_ _PATH_
	where _FILTER_ stands for user-specified selector and _PATH_ is a path of a target file.	其中 _FILTER_ 代表用户指定的选择器，_PATH_ 是目标的路径文件。
	For instance, the following rule is comprised of a selector that selects all [application]cron syslog messages and an action that saves them into the `/var/log/cron.log` log file:	例如，以下规则由选择所有 [application]cron syslog 消息的选择器和将它们保存到 `/var/log/cron.log` 日志文件的操作组成：
	cron.* /var/log/cron.log	cron.* /var/log/cron.log
	By default, the log file is synchronized every time a syslog message is generated. Use a dash mark (`-`) as a prefix of the file path you specified to omit syncing:	默认情况下，每次生成 syslog 消息时都会同步日志文件。使用破折号 (`-`) 作为您指定省略同步的文件路径的前缀：
	_FILTER_ -_PATH_
	Note that you might lose information if the system terminates right after a write attempt. However, this setting can improve performance, especially if you run programs that produce very verbose log messages.	请注意，如果系统在写入尝试后立即终止，可能会造成信息丢失。但是，此设置可以提高性能，尤其是在您运行产生非常冗长的日志消息的程序时。
	Your specified file path can be either static or dynamic. Static files are represented by a fixed file path as shown in the example above. Dynamic file paths can differ according to the received message. Dynamic file paths are represented by a template and a question mark (`?`) prefix:	您指定的文件路径可以是 static 或 dynamic 的。静态文件由固定文件路径表示，如上例所示。动态文件路径可以根据收到的消息而有所不同。动态文件路径由模板和问号 (`?`) 前缀表示：
	_FILTER_ ?_DynamicFile_
	where _DynamicFile_ is a name of a predefined template that modifies output paths. You can use the dash prefix (`-`) to disable syncing, also you can use multiple templates separated by a colon (`;`). For more information on templates, see xref:Viewing_and_Managing_Log_Files.adoc#brid-generating-dynamic-fnames[Generating Dynamic File Names].	其中 _DynamicFile_ 是修改输出路径的预定义模板的名称。您可以使用破折号前缀 (`-`) 禁用同步，也可以使用由冒号 (`:`) 分隔的多个模板。有关模板的详细信息，请参照 xref:Viewing_and_Managing_Log_Files.adoc#brid-generating-dynamic-fnames[Generating Dynamic File Names]。
	If the file you specified is an existing [application]terminal or `/dev/console` device, syslog messages are sent to standard output (using special [application]terminal-handling) or your console (using special `/dev/console`-handling) when using the X Window System, respectively.	如果您指定的文件是现有的 [application]terminal 或 `/dev/console` 设备，在使用 X Window 系统时，系统日志消息将分别发送到标准输出（使用特殊的 [application]terminal-handling）或您的控制台（使用特殊的 `/dev/console`-handling) 。