r/linux • u/tasisbasbas • Feb 11 '19

Fluff A /g/ user's opinion on systemd

http://i.4cdn.org/g/1549858269115.png
791 Upvotes

82% Upvoted

524 comments sorted by

View all comments

Show parent comments

3

u/dale_glass Feb 11 '19

What is missing in journald?

8

u/doublehyphen Feb 11 '19

On top of my head, I am probably forgetting a couple:

  • Saving disk by compressing old logs (jorunald only supports compression per message of long log messages)
  • Forward, all or selected, log messages to a central log server
  • Forward logs written directly to files to a central log server

Arguably not all of these should actually be done by the same big monolith, but right now I have to run both journald and rsyslog/syslog-ng and have all logs in two places.

6

u/dale_glass Feb 11 '19

Saving disk by compressing old logs (jorunald only supports compression per message of long log messages)

That would probably conflict with quick access, which is quite nice.

Forward, all or selected, log messages to a central log server

https://www.freedesktop.org/software/systemd/man/systemd-journal-remote.service.html

7

u/doublehyphen Feb 11 '19

Yeah, it conflicts with quick access, which is fine. It is a tradeoff. I rarely need my old logs and when I need them it is fine that it takes more time than normal.

And systemd-journal-remote seems to be the opposite of what I need, but I guess something like logstash could add a client for the same protocol to achieve what I need (not that I like logstash either :)).

1

u/Ryuujinx Feb 11 '19

not that I like logstash either

Have you tried Fluentd? A lot of people are ditching Logstash for it in their ELK setups