nginx:
nginx1.7版本支持直接在配置中发送syslog:
access_log syslog:server=ip:514,facility=local5,severity=info,tag=accessyymac main;
error_log syslog:server=ip:514,facility=local5,severity=info,tag=errorngmac notice;
不过在测试过程中，发现有时候send()失败会转化成error
php-fpm:(仅启动)
error_log = syslog;
syslog.facility = local5
syslog.ident = phpfpm ##tag
php:
openlog("tag", NULL, LOG_LOCAL5);//制定tag，facility
syslog(LOG_DEBUG,$message);//制定level
closelog();
file:
/etc/rsyslog.conf,加载imfile模块
module(load="imfile")
/etc/rsyslog.d/error.conf:
input(type="imfile"
File="/data/log/error.log"
Tag="errorng87v8error"
Severity="debug"
Facility="local5")
