F20 System Wide Change: No Default Syslog

[Lennart Poettering]

On Tue, 16.07.13 09:13, Dan Fruehauf (malkodan at gmail.com) wrote:

> > Well, there are certain things on Unix that are text files and many
> > things that are not. Binary log files have a long tradition on Unix, for
> > example in wtmp and utmp. We have binary files in /etc, and everywhere
> > else.
> >
> And the reason for that being? I have no idea either, it's probably too old
> to be dug. Howver yes, I'd like these to be text based as well.

Oh, the reasons are pretty well-known for those cases. For example
wtmp/utmp is binary so that utmp works nicely as sparse file and the
entries may be accessed using the UID number as seek index (multipled by
the fixed entry size). So, it's about indexing, exactly as for journal
files. The Unix guys back then chose binary when it made sense for their
immediate technical requirements. And for us it's the exact same.

> > journalctl is certainly not a "complex tool" to understand. Command
> > lines usually get shorter by using it rather than the equivalent for
> > /var/log/messages.
> >
> People might also argue the event viewer in windows is not a "complex
> tool". See where it got them. Mind you event viewer is probably a bit more
> mature than journalctl.

Well, if I cannot convince you to even try it out, and you insist on
conflating the windows log viewer with journalctl (which is about as
smart as conflating microsoft word with vi), then I guess there's no
point in discussing this with you.

> > > Lets try to keep things simple. This is why we use Fedora. This is why I
> > > use Fedora.
> >
> > We are certainly making things simpler by introducing nice query tools
> > like journalctl and by reducing the number of packages we install by
> > default, and by removing redundancy.
> >
> Nice query tools? Lets go with a RDBMS to store the logs then?

Nobody suggests that. 

> And for a short story about a system (I had nothing to do with) which based
> their log files in a RDBMS and their configuration in XML format. Failed
> miserably. The end.

We do neither.

> Another question while we're at it - what happens if and when you decide to
> change your binary format for storing files for whatever reason? Is that
> when we understand that we should have been left with just text based files?

We documented the format, and it is quite extensible. The sources are
open. Altogether this are the best guarantees that the stuff stays
stable and accessible.

Lennart

-- 
Lennart Poettering - Red Hat, Inc.