F20 System Wide Change: No Default Syslog

M A Young m.a.young at durham.ac.uk
Wed Jul 17 14:04:14 UTC 2013


On Wed, 17 Jul 2013, Lennart Poettering wrote:

> "cat /var/log/messages" becomes "journalctl"
> "tail -f /var/log/messages" becomes "journalctl -f"
> "tail -n100 /var/log/messages" becomes "journalctl -n100"
> "grep foobar /var/log/messages" becomes "journalctl | grep foobar"
>
> This isn't complex. You can grep/sed/awk as much as you want. You just
> do it over the output of journalctl rather than teh file. That's not
> that big a difference.

One thing you have missed is how you edit the log file. There may be cases 
where you want to strip out log entries, eg. when a process has gone wild 
and swamped the useful messages with useless ones and you want to keep the 
useful ones and throw away the useless ones.

 	Michael Young


More information about the devel mailing list