Carlos E. R. wrote:
On 2017-04-12 09:13, David C. Rankin wrote:
On 04/10/2017 04:09 AM, Carlos E. R. wrote:
The issue is then that you can not analyze old problems. The default for syslog is one year of logs.
I want a reliable and good replacement for syslog, not a half cooked thing.
We need to look at definitions. It does not get rid of any logs, I still have all logs going back to my 2015 install on another arch with SystemMaxUse=320M, e.g.
02:01 phoinix:~> sudo journalctl --disk-usage Archived and active journals take up 360.0M in the file system.
This system I posted data, is at 1 GB after 4 months. At this rate, it can reach 4 GB per year. The syslog data, which I also keep, is orders of size smaller and searches way much faster.
On a smallish mailserver where I archive mail, messages and firewall logs, it generated 1.7G (compressed) over three years.
On my main computer, the journal grows to a gigabyte in weeks. No way it can keep years of data.
Yeah, use a syslog daemon for that. -- Per Jessen, Zürich (14.4°C) http://www.hostsuisse.com/ - dedicated server rental in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org