IST 190 EXAM 4 QUESTIONS AND ANSWERS
Define systemd-journaldand rsyslog. How are they related to each other? - Answers - -
systemd-journald daemon provides an improved log management service that collects
messages from the kernel the early stages of the boot process, standard output and
error of daemons as they start up and run. And syslog. It writes these messages to a
structed journal of events that, by default not persist between reboots. This allows
syslog messages and events which are missed by syslog to be collected in one central
database. The messages are also forwarded to rsyslog for further processing. The
rsyslog service then sorts messages by type and priority and writhes them to persistent
files in the /var/log directory, which holds various systems. They are related to another
because they are both used for management services also system-journald basically
passes off the information to rsyslog to make a log type files/
Define the purpose of each of the following logs maintained on a RHEL7 server: -
Answers - a./var/log/messagesMostsyslog messages are logged here. The exceptions
are messages related to authentication and email processing. That periodically run jobs,
and those which are purely debugging relatedb./var/log/secure-The log file for security
and authentication related messages and errorsc./var/log/maillogThe lo file with mail
server-related messagesd./var/log/cron-The log file related to periodically executed
tasks.e./var/log/boot.log-Messages related to system startup are logged here.
What is the absolute path to the rsyslogdconfiguration file? - Answers -
/etc/rsyslog.config
List in order and define the eight levels of priority/severity in the rsyslogsystem -
Answers - 1)emerg-system is unusable.2)) alert-Action must be taken immediately,
3)crit-critical condition, 4)) err-non-critical error condition, 5) warning-warning condition
6) notice-normal but significant event 7) info-informational event 8) debug-debugging-
level message.
Write the line that would need to be added to the rsyslog. config file that would capture
allthe log messages for the local4 facility in the /var/log/chapter10.logfile - Answers -
/var/log/boot.log
How long are log files saved on a RHEL7 server by default? - Answers - 3 weeks
What program controls the rotation of RHEL7 logs? How often are logs rotated by
default? - Answers - logrotateutility, most log files are rotated weekly, but logrotate
rotates some faster, or slower, or when they reach a certain size.
Describe the four things that are included in each rsyslogentry - Answers - .The time
stamp when the log entry was recorded, the host from which the log message was sent,
the program or process that sent
, What does the tail -f /var/log/maillog.logdo? - Answers - outputs the last 10 lines of the
/var/log/maillog.log file, specified and continues to output new lines as they get written
to the monitored file.
What does the loggercommand do? - Answers - The loger command can send
messages to the rsyslog service. By default,it sends the message to the facility user
with severity notice unless specified otherwise with the -p option. It is especially useful
to test changes to the rsyslog configuration.
What is the equivalent command using journalctl as tail -f /var/log/logname? - Answers -
The journalctl command shows the full system journal, starting with the oldest log entry,
when run as root user. Journalctl -f (then the file) var/log/Logname
How long is the system journal (systemd-journald) normally stored by default?
Whatdoes an administrator have to do to permanently store the system journal? -
Answers - By default, the system journal is kept in. run/log/journal which means it is
cleared when the system reboots. The administrator mustmake the journal persistentby
creating the directory /var/log /journal as user root,ensure the directory is owned by root
user and group system-d journal, and has the permissions 2755, either a reboot of the
system or sending the signal USR1 as user root to system-journald process is required
Why would an administrator need to configure NTP? - Answers - Correctsynchronized
system time is v veryimportant for the log file analysis across multiple systems. The
NTP is a standard way for machines to provide and obtain correct time information on
the internet. A machine may get accurate time information from public NTP services on
the internet such as the Ntp Pool Project. A high-qualityhardware clock to serve
accurate time to local clients is another option.
What does the command timedatectldo? - Answers - Thetimedatectl command shows
an overview of the current time related system settings, including current time, time
zone, and NZTP synchronizedsettings of the system.
What is the name of the Linux timezone that Greenville Tech is in - Answers - -
America/New_York
What is the command to change the default time zone on a CentOS7 server? - Answers
- timedatectl set-time zone
What is the absolute name of the file to configure the NTP server in RHEL7? - Answers
- etc/chrony.config
What is the command on a CentOS7 server to see the verbose output of the NTP
server time sources? - Answers - Chronyc sources -v
Explain the four layer TCP/IP modelcovered in Chapter 11. - Answers - TCP/IP
standards follow a four layer network model specified in RFC1122. Application-each
Define systemd-journaldand rsyslog. How are they related to each other? - Answers - -
systemd-journald daemon provides an improved log management service that collects
messages from the kernel the early stages of the boot process, standard output and
error of daemons as they start up and run. And syslog. It writes these messages to a
structed journal of events that, by default not persist between reboots. This allows
syslog messages and events which are missed by syslog to be collected in one central
database. The messages are also forwarded to rsyslog for further processing. The
rsyslog service then sorts messages by type and priority and writhes them to persistent
files in the /var/log directory, which holds various systems. They are related to another
because they are both used for management services also system-journald basically
passes off the information to rsyslog to make a log type files/
Define the purpose of each of the following logs maintained on a RHEL7 server: -
Answers - a./var/log/messagesMostsyslog messages are logged here. The exceptions
are messages related to authentication and email processing. That periodically run jobs,
and those which are purely debugging relatedb./var/log/secure-The log file for security
and authentication related messages and errorsc./var/log/maillogThe lo file with mail
server-related messagesd./var/log/cron-The log file related to periodically executed
tasks.e./var/log/boot.log-Messages related to system startup are logged here.
What is the absolute path to the rsyslogdconfiguration file? - Answers -
/etc/rsyslog.config
List in order and define the eight levels of priority/severity in the rsyslogsystem -
Answers - 1)emerg-system is unusable.2)) alert-Action must be taken immediately,
3)crit-critical condition, 4)) err-non-critical error condition, 5) warning-warning condition
6) notice-normal but significant event 7) info-informational event 8) debug-debugging-
level message.
Write the line that would need to be added to the rsyslog. config file that would capture
allthe log messages for the local4 facility in the /var/log/chapter10.logfile - Answers -
/var/log/boot.log
How long are log files saved on a RHEL7 server by default? - Answers - 3 weeks
What program controls the rotation of RHEL7 logs? How often are logs rotated by
default? - Answers - logrotateutility, most log files are rotated weekly, but logrotate
rotates some faster, or slower, or when they reach a certain size.
Describe the four things that are included in each rsyslogentry - Answers - .The time
stamp when the log entry was recorded, the host from which the log message was sent,
the program or process that sent
, What does the tail -f /var/log/maillog.logdo? - Answers - outputs the last 10 lines of the
/var/log/maillog.log file, specified and continues to output new lines as they get written
to the monitored file.
What does the loggercommand do? - Answers - The loger command can send
messages to the rsyslog service. By default,it sends the message to the facility user
with severity notice unless specified otherwise with the -p option. It is especially useful
to test changes to the rsyslog configuration.
What is the equivalent command using journalctl as tail -f /var/log/logname? - Answers -
The journalctl command shows the full system journal, starting with the oldest log entry,
when run as root user. Journalctl -f (then the file) var/log/Logname
How long is the system journal (systemd-journald) normally stored by default?
Whatdoes an administrator have to do to permanently store the system journal? -
Answers - By default, the system journal is kept in. run/log/journal which means it is
cleared when the system reboots. The administrator mustmake the journal persistentby
creating the directory /var/log /journal as user root,ensure the directory is owned by root
user and group system-d journal, and has the permissions 2755, either a reboot of the
system or sending the signal USR1 as user root to system-journald process is required
Why would an administrator need to configure NTP? - Answers - Correctsynchronized
system time is v veryimportant for the log file analysis across multiple systems. The
NTP is a standard way for machines to provide and obtain correct time information on
the internet. A machine may get accurate time information from public NTP services on
the internet such as the Ntp Pool Project. A high-qualityhardware clock to serve
accurate time to local clients is another option.
What does the command timedatectldo? - Answers - Thetimedatectl command shows
an overview of the current time related system settings, including current time, time
zone, and NZTP synchronizedsettings of the system.
What is the name of the Linux timezone that Greenville Tech is in - Answers - -
America/New_York
What is the command to change the default time zone on a CentOS7 server? - Answers
- timedatectl set-time zone
What is the absolute name of the file to configure the NTP server in RHEL7? - Answers
- etc/chrony.config
What is the command on a CentOS7 server to see the verbose output of the NTP
server time sources? - Answers - Chronyc sources -v
Explain the four layer TCP/IP modelcovered in Chapter 11. - Answers - TCP/IP
standards follow a four layer network model specified in RFC1122. Application-each
