文本保存
<p class="shortdesc">本文介绍如何将日志以文本的形式存储下来。</p>
<section class="section prereq" id="byDat__prereq_pdg_4zb_tsb"><div class="tasklabel"><h2 class="doc-tairway">前提条件</h2></div>
<p class="p">您已创建安全日志审计实例。</p>
</section>
<section><div class="tasklabel"><h2 class="doc-tairway">操作步骤</h2></div><ol class="ol steps"><li class="li step stepexpand">
<span class="ph cmd">登录<a class="xref" href="https://www.ocftcloud.com/console/log-audit" target="_blank" rel="external noopener">安全日志审计SLA控制台</a>,进入<span class="keyword wintitle">实例列表</span>页面。</span>
</li><li class="li step stepexpand">
<span class="ph cmd">单击目标实例<span class="ph uicontrol"> 操作</span>列的<span class="ph uicontrol">管理</span>,进入安全日志审计控制台。</span>
<div class="itemgroup info">
<img class="image" id="byDat__d80e53" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-1ecc508f988a.png" width="830">
</div>
</li><li class="li step stepexpand">
<span class="ph cmd">在页面上边栏选择<span class="ph uicontrol">系统</span>,在左侧菜单栏选择<span class="ph menucascade"><span class="ph uicontrol">系统配置</span><abbr> > </abbr><span class="ph uicontrol">高级配置</span></span>,进入<span class="ph uicontrol">高级配置</span>页面。</span>
</li><li class="li step stepexpand">
<span class="ph cmd">在弹出的对话框中输入动态密码,单击<span class="ph uicontrol">确定</span>。</span>
</li><li class="li step stepexpand">
<span class="ph cmd">选择<span class="ph uicontrol">日志存储</span>页签,单击<span class="ph menucascade"><span class="ph uicontrol">新增</span><abbr> > </abbr><span class="ph uicontrol">文本保存</span></span>,根据以下信息,配置文本保存策略,配置完成后单击<span class="ph uicontrol">保存</span>。</span>
<div class="itemgroup info">
<div class="p">
<img class="image" id="byDat__image_brm_54t_4sb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-1a4e342293b9.png" width="500">
</div>
<table class="table" id="byDat__table_zrh_wff_4sb"><caption></caption><colgroup><col><col></colgroup><thead class="thead">
<tr class="row">
<th class="entry colsep-1 rowsep-1" id="byDat__table_zrh_wff_4sb__entry__1">
<p class="p"> 配置项 </p>
</th>
<th class="entry colsep-1 rowsep-1" id="byDat__table_zrh_wff_4sb__entry__2">
<p class="p"> 说明 </p>
</th>
</tr>
</thead><tbody class="tbody">
<tr class="row">
<td class="entry colsep-1 rowsep-1" headers="byDat__table_zrh_wff_4sb__entry__1 ">
<p class="p"> 保存地址 </p>
</td>
<td class="entry colsep-1 rowsep-1" headers="byDat__table_zrh_wff_4sb__entry__2 ">
<p class="p"> 默认保存地址:data/event.dat 。</p>
</td>
</tr>
<tr class="row">
<td class="entry colsep-1 rowsep-1" headers="byDat__table_zrh_wff_4sb__entry__1 ">
<p class="p"> 保存格式 </p>
</td>
<td class="entry colsep-1 rowsep-1" headers="byDat__table_zrh_wff_4sb__entry__2 ">
<p class="p">默认格式为:
deviceAddress=${deviceAddress},deviceId=${deviceId},name=${name},rawEvent=${rawEvent},${srcAddress}/${srcPort},${destAddress}/${destPort})
。</p>
</td>
</tr>
<tr class="row">
<td class="entry colsep-1 rowsep-1" headers="byDat__table_zrh_wff_4sb__entry__1 ">
<p class="p"> 保存线程数 </p>
</td>
<td class="entry colsep-1 rowsep-1" headers="byDat__table_zrh_wff_4sb__entry__2 ">
<p class="p"> 文本保存处理的线程数,默认为1 。</p>
</td>
</tr>
</tbody></table>
</div>
</li></ol></section>
提交成功!非常感谢您的反馈,我们会继续努力做到更好!