From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 81EE41389FE for ; Sat, 1 Nov 2014 01:03:45 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 63537E0923; Sat, 1 Nov 2014 01:03:38 +0000 (UTC) Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com [66.111.4.27]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 3C34AE08D9 for ; Sat, 1 Nov 2014 01:03:37 +0000 (UTC) Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id AC36B205E8 for ; Fri, 31 Oct 2014 21:03:36 -0400 (EDT) Received: from frontend1 ([10.202.2.160]) by compute6.internal (MEProxy); Fri, 31 Oct 2014 21:03:36 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=x-sasl-enc:message-id:date:from :mime-version:to:subject:references:in-reply-to:content-type :content-transfer-encoding; s=smtpout; bh=nIcBZPVEUmPVPjyxlzvQyv iQcDU=; b=heKA7uRPPL3YnUinCn8QDuzWOpNMVeruWNU/f0pGkzor0c2kCifiTW MX+IQ0nm1xLV5pDjsQMTG54fqcBkmnDd1oGHfdTbbSTtrUQpSQf6gDy1t9BT1ElS SDeyKOP4eWpgLITtnPL08cs0h+S1Z6tOjbZY1+EzuHgLA4W/4JRHQ= X-Sasl-enc: zUhpeo/OyiL9eJCBw/2UAH7C56wTPs7/lg9a3qMeNLfq 1414803816 Received: from [192.168.1.15] (unknown [73.2.142.203]) by mail.messagingengine.com (Postfix) with ESMTPA id F4210C00008 for ; Fri, 31 Oct 2014 21:03:35 -0400 (EDT) Message-ID: <54543167.8020705@alectenharmsel.com> Date: Fri, 31 Oct 2014 21:03:35 -0400 From: Alec Ten Harmsel User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.2.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] alternative kernels References: <1721456.cxhDToZz1Z@andromeda> <5707050.LYlfBLMIFp@andromeda> In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Archives-Salt: 96e75e40-7ba4-4c50-95f0-8a621c1d5843 X-Archives-Hash: f941f41933abb7ec80c233cf8116f9ac On 10/31/2014 06:30 PM, Rich Freeman wrote: > On Fri, Oct 31, 2014 at 6:09 PM, Tom H wrote: >> The systemd line was always that if you wanted to ship your logs off >> to another box, use rsyslog. So I've never understood the embedding of >> an httpd in systemd. I guess that the httpd server's useful if if you >> want a basic send-the-logs-to-another-box-as-is, but that, if you want >> to filter or manipulate the journald output, you have to use rsyslog >> or syslog-ng. >> > If you're going to implement a log manager there is no reason to not > let it export logs to a central manager. > > As far as filtering/manipulating logs goes, you can do plenty of that > with journalctl already, and it supports dumping your logs in json so > you can do anything you want with them in another tool. There aren't > really any such tools around yet, but I'm sure we'll see them come up. You guys should check out the ELK stack: http://www.elasticsearch.org/overview/ Basically, transform logs to JSON with logstash, throw the JSON into elastic search, and make plots with Kibana. We use it at work; it's absolutely fantastic. You can save Kibana dashboards and have them auto-update every 5 or 10 seconds (plenty of other granularities as well), and have a "real-time" view of, let's say, job errors or running jobs or utilization. Alec