LWN.net Logo

The Journal - a proposed syslog replacement

The Journal - a proposed syslog replacement

Posted Nov 18, 2011 18:29 UTC (Fri) by Cyberax (✭ supporter ✭, #52523)
In reply to: The Journal - a proposed syslog replacement by quotemstr
Parent article: The Journal - a proposed syslog replacement

Well, it makes sense to use undocumented format at first, so others won't treat it as ABI. But it's not going to be complex so it's definitely going to be replicated in other tools.

As for backwards compatibility, I'm personally going to write a FUSE file system which exposes journal records as regular log files. After all, I already have one that does that for Windows...


(Log in to post comments)

The Journal - a proposed syslog replacement

Posted Nov 18, 2011 19:59 UTC (Fri) by drag (subscriber, #31333) [Link]

I don't mind piping out binary files to grep for things.

I do it for syslogs at work anyways. All the files are stored in gzip format and I have to use 'gunzip -c' to read them.

However, Log files are definitely a weak point for Linux. A huge pain in the ass. If it's a mostly-text file with something like null terminated fields then it would make things a lot easier and more efficient to parse.

The Journal - a proposed syslog replacement

Posted Nov 18, 2011 20:18 UTC (Fri) by mathstuf (subscriber, #69389) [Link]

Ever heard of zgrep?

The Journal - a proposed syslog replacement

Posted Nov 20, 2011 7:49 UTC (Sun) by drag (subscriber, #31333) [Link]

... sure. What about it?

The Journal - a proposed syslog replacement

Posted Nov 21, 2011 23:56 UTC (Mon) by kmself (subscriber, #11565) [Link]

I believe the point is that you can access / search / manage / view compressed files with readily available shell tools.

zgrep will search them.
zcat or zless will dump them to stdout.

lesspipe + less will allow you to view them with less, as you would any other file (lesspipe will also render numerous other file formats as straight text, which is particularly useful).

Woe unto you if you're on a system without these tools, but that's another story. Writing your own shell wrappers (scripts/functions) is trivial.

The Journal - a proposed syslog replacement

Posted Nov 22, 2011 0:55 UTC (Tue) by mathstuf (subscriber, #69389) [Link]

I was more pointing out that tools exist that do the gunzip -c internally. I almost never use gunzip except via the z* tools and tar xf. I always appreciate shotcuts for things like that (at least those commonly available on random machines, e.g. my vim bindings don't modify core behavior that is easy to get a bad habit with when sshing around, like nnoremap jj <Esc>).

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds