From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id A8CE2138A1A for ; Wed, 18 Feb 2015 22:43:38 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id D8EEEE083C; Wed, 18 Feb 2015 22:43:30 +0000 (UTC) Received: from mx2.cims.nyu.edu (MX2.CIMS.NYU.EDU [128.122.49.96]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id BA0D4E07F7 for ; Wed, 18 Feb 2015 22:43:29 +0000 (UTC) Received: from smtp.cs.nyu.edu (smtp.cs.nyu.edu [128.122.49.97]) by mx2.cims.nyu.edu (8.14.4+Sun/8.14.4) with ESMTP id t1IMhItS028374 for ; Wed, 18 Feb 2015 17:43:22 -0500 (EST) Received: from newlap.localdomain (ool-18be5dbd.dyn.optonline.net [24.190.93.189]) (authenticated bits=0) by smtp.cs.nyu.edu (8.14.3/8.14.4) with ESMTP id t1IMhHZT028369 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Wed, 18 Feb 2015 17:43:18 -0500 (EST) Received: by newlap.localdomain (Postfix, from userid 1000) id 2FEEDAAFD2; Wed, 18 Feb 2015 17:43:17 -0500 (EST) From: gottlieb@nyu.edu To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] syslog-ng: how to read the log files References: <87lhjws8ci.fsf@heimdali.yagibdah.de> <28267.1424201355@ccs.covici.com> <878ufvqdu0.fsf@nyu.edu> Date: Wed, 18 Feb 2015 17:43:17 -0500 In-Reply-To: ("Canek \=\?utf-8\?Q\?Pel\=C3\=A1ez_Vald\=C3\=A9s\=22's\?\= message of "Wed, 18 Feb 2015 12:53:51 -0600") Message-ID: <87fva2q1ru.fsf@nyu.edu> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.4 (gnu/linux) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.4.1 (mx2.cims.nyu.edu [128.122.49.96]); Wed, 18 Feb 2015 17:43:22 -0500 (EST) X-Virus-Scanned: clamav-milter 0.97.4 at mx2 X-Virus-Status: Clean X-Scanned-By: MIMEDefang 2.73 on 128.122.49.96 X-Archives-Salt: 05139671-b679-4694-a6eb-0c071800d66f X-Archives-Hash: 60f3e9e9613016afadf6b664b4d2b85a On Wed, Feb 18 2015, Canek Pel=C3=A1ez Vald=C3=A9s wrote: > On Wed, Feb 18, 2015 at 12:22 PM, wrote: >> >> On Tue, Feb 17 2015, Canek Pel=C3=A1ez Vald=C3=A9s wrote: >> >> > On Tue, Feb 17, 2015 at 2:29 PM, wrote: >> >> >> >> I wonder if the OP is using systemd and trying to read the journal >> >> files? >> > >> > Those live under /var/lib/journal (which you need to create; Gentoo >> > doesn't do it by default last time I saw), >> >> Wow! I just checked and indeed I do not have /var/lib/journal. >> I run systemd (thanks to canek) and use journalctl, which I *thought* >> was displaying the journal). > > The journal works without permanent storage (one more of its many > advantages); in that case, it keeps a small amount of logs in memory (you > can set how much memory to reserve for it). > >> Need I make some changes? > > Only if you want to have logs in permanent storage. In that case, you only > need to create the /var/log/journal dir with systemd-journal GID, and 2755 > permissions (with setgid). systemd-journald will automatically rotate the > logs when they use 10% of the free disk available (you can also change > that). > > Since the logs are compressed and indexed, each entry on them is accesible > in O(1), and they don't use that much space (with 280 megabytes reserved = in > my laptop for journal logs, I have logs since Sep 20, 2014; that's 5 mont= hs > worth of logs, although my laptop doesn't run that many daemons). > > Anyway, the journal works perfectly without permanent storage (as you can > see); if you are happy that way, you don't need to enable it. > > Regards. > -- > Canek Pel=C3=A1ez Vald=C3=A9s Thank you for another lucid explanation. allan