On Thursday, September 20, 2012 21:51:35 Peter Czanik wrote:
Hello,
Before we all end up in flames, a hopefully not too biased view from syslog-ng upstream :-)
First of all, systemd journal is a perfect solution for about 90%+ of openSUSE users, which have stand alone workstations and don't care at all about logging. They don't need rsyslog or syslog-ng. The journal collects logs under /var/log/journal into some binary files. By default it does not take more than 5% of available disk space, so logs can't fill up the partition accidentally. It's very limited, but user friendly. Actually I don't really understand, why syslog is still installed on openSUSE (ArchLinux removed syslog from systemd based installations to avoid dual logging...), but this is a different questions...
Thanks Peter for the info. So, let's remove syslog/rsyslog from the default install now. Coolo, could you do the change - if you agree with it, please? Frederic, could you send Karl Eichwalder an update for the 12.3 release notes mentioning this? Thanks, Andreas
For the remaining <10%, see some information below.
On 09/20/2012 06:39 PM, Per Jessen wrote:
What about the standard syslog setup that we use, does systemd journal support that at the moment or will everything just be written to the journal and then only filtered out when displayed?
The good news is, that standard syslog setup is supported. One can almost completely get rid of systemd journal. Just "rm -fr /var/log/journal". It's safe, systemd journal will still keep enough information in tmpfs to provide information about running services. It still takes over /dev/log, but forwards all information to /var/run/systemd/journal/syslog so syslog-ng can read local logs from there instead of /dev/log. The bad news is, that this info is not mentioned in any man pages installed on openSUSE. So, if you still want a flexible logging solution, like syslog-ng, on a server, or a networked workstation, just do that "rm -fr /var/log/journal". This way even that 5% of the partition is not wasted, and you can configure your favorite logger to your liking. You will have all the usual formatting templates, networking possibilities, filters, patterndb, etc.
I hope this helps, and flames are extinguished :) Bye, Peter Czanik (CzP) BalaBit IT Security / syslog-ng upstream http://czanik.blogs.balabit.com/ -- Andreas Jaeger aj@{suse.com,opensuse.org} Twitter/Identica: jaegerandi SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany GF: Jeff Hawn,Jennifer Guild,Felix Imendörffer,HRB16746 (AG Nürnberg) GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126
-- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org