On 12/20/2016 06:24 AM, Andrei Borzenkov wrote:
Systemd author is actively opposed to any idea to filter log entries in journald.
So here I am at a bank or a brokerage firm or some other regulated commodity (and yes, I've been though similar at a electricity provider and natural gas distributor) and its important that many things, event logs, business transaction logs, various types of communication, NOT be filtered and in some cases not deleted, perhaps never, perhaps only for seven years. The ones I've worked -- oh and many major NOCs I've visited and interviewed at as well - at have a dedicated team with dedicated high powered machines and huge amounts of disk devoted to logging and log analysis. Some are dealing with attacks and intrusions, insider violations, and of course maintenance events. As I've posted before, one such was simply a ITIL event management interface: if anything happened at one of nearly 50,000 branches of the bank across Canada and the Caribbean they knew about it, if it was more than just an out-of-paper or paper jam they'd notify the office or the support contractor for that area. This is how BIG FIRMS operate. (You could say that this is how IBM taught them to operate by supplying this elves of service for them back in the days ...) The reality is that more and more Linux, as well as Windows, is addressing the needs of Business, and Big Business/Wall Street at that, rather than the singleton home user, the hobbyist. This has become true of the desktop and the laptop as well, with RAID on the laptop, BtrFS for snapshotting, lots more. To be more comprehensive: the market has polarized. The casual user of old has not moved to the phone or tablet for browsing, email/gmail, news pages, Twitter, Facebook. The high demand singleton users are gamers who probably spend more on a graphics board than on the rest of the machine. Other such 'verticals'. That makes many of us 'hobbyists' on PC a bit of an anachronism. -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org