Well, it makes sense to use undocumented format at first, so others won't treat it as ABI. But it's not going to be complex so it's definitely going to be replicated in other tools.
As for backwards compatibility, I'm personally going to write a FUSE file system which exposes journal records as regular log files. After all, I already have one that does that for Windows...
Posted Nov 18, 2011 19:59 UTC (Fri) by drag (subscriber, #31333)
[Link]
I don't mind piping out binary files to grep for things.
I do it for syslogs at work anyways. All the files are stored in gzip format and I have to use 'gunzip -c' to read them.
However, Log files are definitely a weak point for Linux. A huge pain in the ass. If it's a mostly-text file with something like null terminated fields then it would make things a lot easier and more efficient to parse.
The Journal - a proposed syslog replacement
Posted Nov 18, 2011 20:18 UTC (Fri) by mathstuf (subscriber, #69389)
[Link]
Ever heard of zgrep?
The Journal - a proposed syslog replacement
Posted Nov 20, 2011 7:49 UTC (Sun) by drag (subscriber, #31333)
[Link]
... sure. What about it?
The Journal - a proposed syslog replacement
Posted Nov 21, 2011 23:56 UTC (Mon) by kmself (subscriber, #11565)
[Link]
I believe the point is that you can access / search / manage / view compressed files with readily available shell tools.
zgrep will search them.
zcat or zless will dump them to stdout.
lesspipe + less will allow you to view them with less, as you would any other file (lesspipe will also render numerous other file formats as straight text, which is particularly useful).
Woe unto you if you're on a system without these tools, but that's another story. Writing your own shell wrappers (scripts/functions) is trivial.
The Journal - a proposed syslog replacement
Posted Nov 22, 2011 0:55 UTC (Tue) by mathstuf (subscriber, #69389)
[Link]
I was more pointing out that tools exist that do the gunzip -c internally. I almost never use gunzip except via the z* tools and tar xf. I always appreciate shotcuts for things like that (at least those commonly available on random machines, e.g. my vim bindings don't modify core behavior that is easy to get a bad habit with when sshing around, like nnoremap jj <Esc>).