我在运行 syslog GUI 时遇到了困难。我在系统日志中添加了一个新过滤器。我所做的是：单击 GUI 窗口右上角的按钮（带有齿轮图标的按钮）。然后，单击菜单项过滤器-> 新建 -> 填写过滤器名称（过滤器名称是用空格字符分隔的单词）和我想要查看的日志的关键字 -> 单击确定完成创建过滤器。
之后，系统日志崩溃了。从那时起，我就无法再运行 syslog gui 了。每次我尝试启动该应用程序时，它都会直接自动关闭。
这是与 syslog 相关的日志文件内容。看来 KLogPermitNonKernaelFacility 无法运行。有人知道如何修复这个问题吗？
[编辑 2.1] 我使用后：
tail -f /var/log/syslog
我发现每次我尝试运行 syslog 时，内核都会给我：
traps: gnome-system-lo[20589] trap int3 ip:7f83223aba6b sp:7ffc2e3b3730 error:0
[我尝试过的] 我尝试卸载 rsyslog 并重新安装
apt-get autoremove rsyslog
然后做
apt-get install rsyslog
[编辑2] 按照 MicroParsec 的建议卸载并清除。仍然无法启动日志应用程序
$:/var/log$ sudo apt-get remove --purge rsyslog
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages will be REMOVED:
rsyslog*
0 upgraded, 0 newly installed, 1 to remove and 7 not upgraded.
After this operation, 1,328 kB disk space will be freed.
Do you want to continue? [Y/n] Y
(Reading database ... 215216 files and directories currently installed.)
Removing rsyslog (8.16.0-1ubuntu3) ...
Purging configuration files for rsyslog (8.16.0-1ubuntu3) ...
Processing triggers for man-db (2.7.5-1) ...
$:/var/log$ sudo apt-get purge rsyslog
Reading package lists... Done
Building dependency tree
Reading state information... Done
Package 'rsyslog' is not installed, so not removed
0 upgraded, 0 newly installed, 0 to remove and 7 not upgraded.
$:/var/log$ sudo apt-get install rsyslog
Reading package lists... Done
Building dependency tree
Reading state information... Done
Suggested packages:
rsyslog-mysql | rsyslog-pgsql rsyslog-doc rsyslog-gnutls rsyslog-gssapi rsyslog-relp
The following NEW packages will be installed:
rsyslog
0 upgraded, 1 newly installed, 0 to remove and 7 not upgraded.
Need to get 0 B/365 kB of archives.
After this operation, 1,328 kB of additional disk space will be used.
Selecting previously unselected package rsyslog.
(Reading database ... 215156 files and directories currently installed.)
Preparing to unpack .../rsyslog_8.16.0-1ubuntu3_amd64.deb ...
Unpacking rsyslog (8.16.0-1ubuntu3) ...
Processing triggers for ureadahead (0.100.0-19) ...
Processing triggers for systemd (229-4ubuntu7) ...
Processing triggers for man-db (2.7.5-1) ...
Setting up rsyslog (8.16.0-1ubuntu3) ...
Creating config file /etc/rsyslog.d/50-default.conf with new version
The user `syslog' is already a member of `adm'.
Skipping profile in /etc/apparmor.d/disable: usr.sbin.rsyslogd
Processing triggers for systemd (229-4ubuntu7) ...
Processing triggers for ureadahead (0.100.0-19) ...
[编辑 3]
編輯后sudo gedit /etc/rsyslog.d/50-default.conf
从
daemon.*;mail.*;\
news.err;\
*.=debug;*.=info;\
*.=notice;*.=warn |/dev/xconsole
到
daemon.*;mail.*;\
news.err;\
*.=debug;*.=info;\
*.=notice;*.=warn
#|/dev/xconsole
内核仍然发出错误gnome-system-lo[21384] trap int3 ip:7f817444aa6b sp:7fff2713fb00 error:0并拒绝启动系统日志查看器。
提前致谢。
韓