On 03/03/2016 11:12 AM, Carlos E. R. wrote:
It is very fair. Two weeks, including mail and news and everything:
The point I was trying to make wasn't about the time span but about the method. Having journalctl output *everything* then greping is the wrong way to do it. Journalctl is managing what amounts to a database, make the database mechanism, the 'indexing', do the work. In effect you wrote select * from all tables | grep .... where I was writing select 'postfix' or 'fetchmail' or 'fetchnews' from commands ... That you choose, in your specific config, to have different time spans for journald and /var/log/messages is just being antagonistic and missing the point. You used journalctl in your grep example, and that CAN be compared with the use of journalctl without grep in my example on your machine. Whether your journalctl covers the same timespan as your syslog is not relevant here, only the performance of a journalctl based pipeline with two different ways of filering are being compared. The different timespans are a red herring. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org