On 12/20/2016 09:17 AM, Carlos E. R. wrote:
Say that I have to keep logs of events for a year or two. This is not rare (you can be mandated for legal reasons). Yes, I can configure journal to do this, no problem so far. Now, journal keeps *all* entries of *everything*. That is the problem.
Um, NOT. Those mandated to keep logs of events, banks and other regulated industries, and with the government attitudes that's going to include internet service providers too pretty soon, need to keep all "relevant" events. That "relevant" means the ability to cross reference and attribute the whys and wherefores, the who and the when. That amounts to *everything* in so far as every access, every reboot, every reconfiguration. Some industries, I've met this at banks, brokerages and with a regulated utility, are under more than one set of demands and regulations, so you can't be too comprehensive. -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org