On Fri, 2021-01-01 at 12:15 -0500, Matthew Miller wrote:
As we start a new year, I'm thinking about data retention in
In my experience, it's pretty rare on an end-user laptop or desktop
logs from much more than the previous boot to be interesting. Maybe I
occasionally want to look back a little while to see if a problem
started. It's exceedingly rare that I need (or want) to look back
Right now, we don't set MaxRetentionSec, so journal expiry on
entirely based on disk usage.
Logs can accidentally contain sensitive data, and it's just plain
work with them when there's less. I propose we set this to something
six months by default.
On RHEL/Centos 7. I notice that log rotate default is 4 weeks , I guess
this is because is the default of Fedora ... . So we should think the
default we use for Fedora one day will be the default for RHEL .
I use 52 weeks in my machines or even 104 weeks if they are important,
because specially on security issues , we need dig for more than 2 or
3 months and for statistic like watch disk usage , etc
Like logrotate, I'd like have journal retention for one year / 52 weeks
Sérgio M. B.