如何利用Debian Syslog分析系统性能

<code>sudo systemctl status rsyslog</code>

<code>sudo systemctl start rsyslog</code>

<code>sudo nano /etc/rsyslog.conf</code>

<code># Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.*                                                 /dev/console
& ~                                                 # 抑制所有内核消息
<h1>Log anything (except mail) of level info or higher.</h1><h1>Don't log private authentication messages!</h1><p>*.info;mail.none;authpriv.none;cron.none                /var/log/syslog</p><h1>The authpriv file has restricted access.</h1><p>authpriv.*                                              /var/log/secure</p><h1>Log all the mail messages in one place.</h1><p>mail.*                                                  -/var/log/maillog</p><h1>Log cron stuff</h1><p>cron.*                                                  /var/log/cron.log</p><h1>Everybody gets emergency messages</h1><p><em>.emerg                                                 </em></p>
                    <div class="aritcle_card">
                        <a class="aritcle_card_img" href="/xiazai/code/8874">
                            <img src="https://img.php.cn/upload/webcode/000/000/007/175705920583388.jpg" alt="eMart 网店系统">
                        </a>
                        <div class="aritcle_card_info">
                            <a href="/xiazai/code/8874">eMart 网店系统</a>
                            <p>功能列表：底层程序与前台页面分离的效果，对页面的修改无需改动任何程序代码。完善的标签系统，支持自定义标签，公用标签，快捷标签，动态标签，静态标签等等，支持标签内的vbs语法，原则上运用这些标签可以制作出任何想要的页面效果。兼容原来的栏目系统，可以很方便的插入一个栏目或者一个栏目组到页面的任何位置。底层模版解析程序具有非常高的效率，稳定性和容错性，即使模版中有错误的标签也不会影响页面的显示。所有的标</p>
                            <div class="">
                                <img src="/static/images/card_xiazai.png" alt="eMart 网店系统">
                                <span>0</span>
                            </div>
                        </div>
                        <a href="/xiazai/code/8874" class="aritcle_card_btn">
                            <span>查看详情</span>
                            <img src="/static/images/cardxiayige-3.png" alt="eMart 网店系统">
                        </a>
                    </div>
                <h1>Save news errors of level crit and higher in a special file.</h1><p>uucp,news.crit                                          /var/log/spooler</p><h1>Save boot messages also to boot.log</h1><p>local7.*                                                /var/log/boot.log</code>

<code>sudo journalctl -xe</code>

<code>sudo journalctl --since "2023-04-01" --until "2023-04-30"</code>

<code>sudo journalctl -u rsyslog.service | grep "CPU usage"</code>

<code>sudo journalctl -u rsyslog.service | grep "memory usage"</code>