On 2016-03-03 20:07, jdd wrote:
Le 03/03/2016 19:58, Carlos E. R. a écrit :
What I want is delete some specific entries, by facility and level, and keep others for years and years.
or simply fork these entries to an other account and let the system roll the logs as usual
the usual logrotate did not remove anything and accumulated years of tgz
No, not true. Logrotate compresses the current log, and limits the compressed logs either by date or by number of files, removing the rest.
"what I want" is obviously wrong.
It's clear from what you said that what you want is keep track of some part of the logs. The way you can do it with journalctl may not be the same than previously, that don't mean it can't be done. and if it can't, open a bug report
It simply can't be done reliably. If you need to keep an archive of logs, it has to be plain text, perhaps compressed, so that they can be kept anywhere and retrieved anywhere, without special tools. Say, keep logs in CDs, for instance. -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)