From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id D458E138A1A for ; Wed, 18 Feb 2015 19:01:47 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 82C24E098A; Wed, 18 Feb 2015 19:01:42 +0000 (UTC) Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 3E82BE08C1 for ; Wed, 18 Feb 2015 19:01:41 +0000 (UTC) Received: from marcec.fritz.box ([93.181.44.4]) by mail.gmx.com (mrgmx002) with ESMTPSA (Nemesis) id 0M2ts6-1XWbzB3KdS-00se7n for ; Wed, 18 Feb 2015 20:01:39 +0100 Date: Wed, 18 Feb 2015 20:01:32 +0100 From: Marc Joliet To: gentoo-user@lists.gentoo.org Subject: systemd journal location (was: Re: [gentoo-user] syslog-ng: how to read the log files) Message-ID: <20150218200132.3611e750@marcec.fritz.box> In-Reply-To: <20150217233126.30ac9b70@marcec.fritz.box> References: <87lhjws8ci.fsf@heimdali.yagibdah.de> <28267.1424201355@ccs.covici.com> <20150217233126.30ac9b70@marcec.fritz.box> X-Mailer: Claws Mail 3.11.1 (GTK+ 2.24.25; x86_64-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; boundary="Sig_/vmEV1UZ8aO1.f.k8=qN7eyP"; protocol="application/pgp-signature" X-Provags-ID: V03:K0:vKzhOWQkRG92Vj9Esx6BJcxw46QDfPz5pKO3yjoEzBFNEyz/XnB fPh44euyu4x5oQziylQ6dfj9Ait1P6pxZzDXlIAOFndA9Q8V2PKtBVxPsBWoiaQaTzCSqVT xBxRhmOF8AxgUcHxPb9/avfeexPt5aiZjqx/EtI2BbEeSX2H38n3cwcSVhkWrasFYiOeIdK 0h8pwzfzO4UJsIuTtgXLg== X-UI-Out-Filterresults: notjunk:1; X-Archives-Salt: 9de8aad0-9dad-4cb5-bef5-ddd5a7bcd52f X-Archives-Hash: 1fc00559e2cfd652afe26d83d2e29cab --Sig_/vmEV1UZ8aO1.f.k8=qN7eyP Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Am Tue, 17 Feb 2015 23:31:26 +0100 schrieb Marc Joliet : > Am Tue, 17 Feb 2015 13:45:38 -0600 > schrieb Canek Pel=C3=A1ez Vald=C3=A9s : >=20 > > On Tue, Feb 17, 2015 at 2:29 PM, wrote: > > > > > > Alexander Kapshuk wrote: > > > > > > > On Tue, Feb 17, 2015 at 8:26 PM, lee wrote: > > > > > > > > > Hi, > > > > > > > > > > how do you read the log files when using syslog-ng? > > > > > > > > > > The log file seem to be some sort of binary that doesn't display = too > > > > > well in less, and there doesn't seem to be any way to read them. > > > > > > > > > > > > > > > -- > > > > > Again we must be afraid of speaking of daemons for fear that daem= ons > > > > > might swallow us. Finally, this fear has become reasonable. > > > > > > > > > > > > > > If you're talking about /var/log/messages, which is: > > > > messages: data > > > > > > > > I use cat(1). > > > > > > I wonder if the OP is using systemd and trying to read the journal > > > files? > >=20 > > Those live under /var/lib/journal (which you need to create; Gentoo doe= sn't > > do it by default last time I saw) > [...] >=20 > It did on my laptop after I migrated it to systemd over the weekend (on a= whim, > no less -- apparently I'm adventurous?). Or, to be more precise, I didn't= have > to create the directory myself. And wouldn't it be created at run-time, a= nyway? > That's what I would expect, at least. Dammit, I *wanted* to mention that I didn't have my laptop there to look, a= nd now I regret not doing it, because I was *actually* thinking of /var/log/journal/ (which I still didn't create by hand, BTW). I mean, it still contains journal files, and systemd-journald(8) says its t= he default *persistent* journal location. However, it is structured different= ly than what you showed, namely: % tree /var/log/journal/ /var/log/journal/ =E2=94=9C=E2=94=80=E2=94=80 b3a495d35e890b80816684a4521fc1cc =E2=94=82=C2=A0=C2=A0 =E2=94=9C=E2=94=80=E2=94=80 system.journal =E2=94=82=C2=A0=C2=A0 =E2=94=94=E2=94=80=E2=94=80 user-1000.journal =E2=94=94=E2=94=80=E2=94=80 remote So it creates a directory named after the machine ID, which contains a syst= em journal and one journal per user. And if it receives logs from remote machines, those go into the remote folder. Just, uh, just so you know... --=20 Marc Joliet -- "People who think they know everything really annoy those of us who know we don't" - Bjarne Stroustrup --Sig_/vmEV1UZ8aO1.f.k8=qN7eyP Content-Type: application/pgp-signature Content-Description: Digitale Signatur von OpenPGP -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBAgAGBQJU5OGQAAoJEL/Q5oYsiHj0y+QP/AsJbWOrcVOwzcb/cMZeVI5c qZ4OhxC0FJ53AEoXkABDZ/xYtb44N7Z/qy5PPWdis3U3LuYo6qnv1LPqx/sibM8V J1DgP3evQaFO34Z7AwypvpGxEa7pVAqxPvtv/8KotqWvAIHPQB1wXo2deI5QBic7 mi2GuDlcBKoywcDn5jmJnwoXasgUPivq00c411rYqA9tKA9ShbaZuwXkjZ1dZZXW +NRgZ/AHlfzxnt2maoVtERxd3JD4gO5KAtJEnqb99xlEPvBlISXANZgV7QvC0QXm vbFnUpNk4OYd9HLYanexfVZOCSnVQMsHRhMki0Nhve47XiQEKJqttFBJjwMtCeUh /8OMHXJlVLuDefFlSmuvmqbsef7oyS/0+4YGR3Q78bHgBq5TLkl/LrOS7H3K6zq6 ElyHYdaYp0O03aVI7G/24tFW2nY4MPMaapeWfWAdJ6ReKZIAr+kLxHBiL8O9xuMB S3d3hh0YUZ7BJZnYbA4OftbQ8XW1elZgLM8G3zU4DbNnXW2biLR2hLFKxI3evGpa pqTMzofRnJgoaudK/Msi7NpziTywPy7T3BLX0Bw3KK9xIeAflYFvVL0XYiIHcDMG 9dSaSDWgNtJOdiwQOxvtarBslaeTQxuVNTL6oJEk09i/zP9vB1yZ/miq0pAW/kdR fuvSxFwxvDlEZ/gABJ6i =OOJ9 -----END PGP SIGNATURE----- --Sig_/vmEV1UZ8aO1.f.k8=qN7eyP--