Работа с файловыми логами

Все логи находятся по пути var/logs

В нашем случае мы смотрим логи Nginx, данная команда показывает в реальном времени лог:

sudo tail -f /var/log/nginx/access.log

Так же есть лог с ошибками, будем использовать вывод только последних 50 строк:

sudo tail -n 50 /var/log/nginx/error.log

Если не находим причину поломки, то используем [[Нужные команды для DevOps Engineer#Journalctl| journalctl]]

Продвинутый уровень

Для того чтобы определить в чем проблем приходиться копаться глубжде в логах для этого мы используем journalctl.

Чтобы смотреть только логи nginx используем эту команду:

sudo journalctl -u nginx

Данная команда показывает конец журнала, помогает понять на какой ошибке остановился сервис(очень выручает при дебаге):

sudo journalctl -xe

Наблюдать за всей системой в реальном времени:

sudo journalctl -f

[[Нужные команды для DevOps Engineer#Journalctl| journalctl]]

Фильтрация логов через `grep`

Для того чтобы не обрабатывать вручную логи или файлы, можно использовать команду grep

cat /var/log/nginx/access.log | grep "192.168.101.131"

^833518

вот пример того что можно сделать при помощи этой команды

полный лог access.log

192.168.101.201 - - [28/Feb/2026:12:36:28 +0000] "GET / HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64
192.168.101.201 - - [28/Feb/2026:12:36:28 +0000] "GET /favicon.ico HTTP/1.1" 404 134 "http://casaos.com/" "Mozilla1 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:12:40:27 +0000] "GET / HTTP/1.1" 200 424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64
192.168.101.201 - - [28/Feb/2026:12:40:33 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; 
192.168.101.201 - - [28/Feb/2026:12:40:37 +0000] "GET / HTTP/1.1" 200 424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64
192.168.101.201 - - [28/Feb/2026:12:40:37 +0000] "GET /favicon.ico HTTP/1.1" 404 134 "http://192.168.101.131/" "Mo100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:12:40:38 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; 
192.168.101.201 - - [28/Feb/2026:12:40:45 +0000] "GET / HTTP/1.1" 200 424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64
192.168.101.201 - - [28/Feb/2026:12:40:45 +0000] "GET /favicon.ico HTTP/1.1" 404 134 "http://192.168.101.131/" "Mo100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:12:42:08 +0000] "GET / HTTP/1.1" 200 420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64
192.168.101.201 - - [28/Feb/2026:13:54:57 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:54:57 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:54:58 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:54:58 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:00 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:00 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:00 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:00 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:00 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:01 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:03 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:04 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:04 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:04 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:04 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:04 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:04 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:04 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:05 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:05 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:05 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:05 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:05 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:06 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:06 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:07 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:08 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:08 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:08 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:09 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:09 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:09 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:09 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:09 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:09 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:09 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:13:55:10 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"

после того как мы использовали ранее описанную [[Работа с файловыми логами#^833518| команду]]

192.168.101.201 - - [28/Feb/2026:12:35:30 +0000] "GET /favicon.ico HTTP/1.1" 404 134 "http://192.168.101.131/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:12:40:37 +0000] "GET /favicon.ico HTTP/1.1" 404 134 "http://192.168.101.131/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"
192.168.101.201 - - [28/Feb/2026:12:40:45 +0000] "GET /favicon.ico HTTP/1.1" 404 134 "http://192.168.101.131/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0"

Далее идет практическа работа: [[Практическая работа с логами(Nginx)]]

Работа с файловыми логами

Продвинутый уровень

Фильтрация логов через grep

полный лог access.log

после того как мы использовали ранее описанную [[Работа с файловыми логами#^833518| команду]]

Фильтрация логов через `grep`