Re: Using old (not systemd) system logs
On Fri, Dec 12, 2025 at 3:24 PM Roy J. Tellason, Sr. <roy@rtellason.com> wrote:
>
> On Thursday 11 December 2025 10:24:21 pm The Wanderer wrote:
> > That's certainly one of the major aspects of the reasons I don't care
> > for the systemd ways of doing logging. I recognize that they have their
> > advantages, and that there are good reasons people went to the trouble
> > of implementing them; I just don't think those advantages outweigh the
> > proprietariness-or-something-similar disadvantages, in most cases.
>
> I'd be interested in hearing what those advantages are.
A couple of reasons come to mind:
* Avoiding injections - Systemd's format makes it easier to parse
logs, and avoid things like fake timestamps injection.
* Remote logging - It ensures an audit trail in case a server is compromised.
* Aggregated logging - dropping logs at a centralized dropping point
for tools like Splunk.
Users can usually achieve the same with a tool like Rsyslog. Systemd
makes it a core feature.
> I keep bumping into things that are major changes away from what I'm used to
> and understand, and the first thing that comes to mind for me is "Why?"...
I miss being able to grep my log files, too. I gave up years ago.
Jeff
Reply to: