On 2016-09-19 12:41, Per Jessen wrote:
Carlos E. R. wrote:
The problem is that /run is a tmpfs, stored in RAM. So, if you have a journal of 2 GB in /run/log/journal you do have a problem, because 2 GB of RAM are wasted.
Isn't it swapped out anyway? (just wondering).
Unclear. I do not know how to find out how much is swapped, if any. And if swapped, just query the log and goes back to ram. I limited my journal mem usage, because I prefer having that memory available to applications, and instead have the logs in syslog. The problem with journal, or one problem, is that you can not purge it by filter. Ie, say, erase from the journal all nntp entries, or all mail entries, and have them all dumped to file instead (ie, syslog). That's the typical reason the journal grows so big, that you have some type of event that fills it. Think mail server, news server. -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)