F20 System Wide Change: No Default Syslog

Zbigniew Jędrzejewski-Szmek zbyszek at in.waw.pl
Mon Jul 15 20:43:29 UTC 2013


On Mon, Jul 15, 2013 at 02:28:41PM -0600, Eric Smith wrote:
> > One process less in the system → faster bootup.
> 
> As has been pointed out, it could easily be the systemd journal
> process that writes to /var/log/messages, so there wouldn't
> necessarily be one fewer process.
> 
> > Logs not duplicated → less disk usage.
> 
> True. So keep /var/log/messages and make the binary journal optional.
Binary journal gives other features like:
- additional metadata (log level, selinux context, uid, gid,
  capability set (coming soon), cgroups, systemd unit)
- slicing and dicing of the data (reverse output, various formats,
  interleaving of journals from multiple machines, fast filtering
  by various properties)
- fast access to the data, so e.g. 'systemctl status unit'
  can show data for that unit. With text based /var/log/messages
  this would be just to slow. Also TAB-completion for filters.

So removing the binary journal has huge downsides. The need for
/var/log/messages filters down to wanting to use less or shell
built-ins to read the data, which is a valid usecase, but not
worth the overhead in 99% of cases.

Zbyszek
-- 
they are not broken. they are refucktored
                           -- alxchk


More information about the devel mailing list