Have you read the document?
Posted Nov 20, 2011 20:13 UTC (Sun) by
khim (subscriber, #9252)
In reply to:
Have you read the document? by quotemstr
Parent article:
The Journal - a proposed syslog replacement
> attach it to the existing textual file
Why not?
Because these files are already processed by quite a few different programs stitched together in non-obvious ways. To hope that you can keep all that synchronized... I'll wish you luck.
The nightmare scenario is for some messages to appear only in the journal and for other messages to appear only in syslog files.
If I understand correctly all messages pass the journald but plain old syslogd messages go to syslogd too. This means journald keeps everything no matter what.
(
Log in to post comments)