From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 19E65138A1A for ; Wed, 18 Feb 2015 18:54:19 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 12D2EE094E; Wed, 18 Feb 2015 18:54:14 +0000 (UTC) Received: from mail-la0-f43.google.com (mail-la0-f43.google.com [209.85.215.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id E44D1E0880 for ; Wed, 18 Feb 2015 18:54:12 +0000 (UTC) Received: by labpn19 with SMTP id pn19so3131999lab.4 for ; Wed, 18 Feb 2015 10:54:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :content-type; bh=+c5+aENkr1N/OcwD3rr3JewplrL82NYIQz9CLkKoT3U=; b=DKre++TspPJIYvXF+26e4dyFLX2NthhgT+df6loq82oI/kGfWjCSMsu6YHw96E3nA3 hNc5Ns9W0TlGRZkdChXKTXFLv2azcqJOl+Ok6U+6x6WnxVnfvTa9FyrcewqqMzfmocmg 5ZYDROTbhg5yFSVE64opwh+t1ic2kKsz/MacEIvKDcA0nDOcAtHAnzmTZiDKwlWlhwGM Mo7/gcU1/XYYhqykjl1eHVCEohC2hUYicQOL9EAhUUcr4IWLQv8ZkL4PFQCdTVu2aB1U XgnzM4SxRQ/Ylj8ZfAsi1gaKKY0VXnDvOYuwbaZYnxW9jKBZ4d/anevHbornk568tSkH w8xQ== X-Received: by 10.112.159.195 with SMTP id xe3mr800894lbb.64.1424285651455; Wed, 18 Feb 2015 10:54:11 -0800 (PST) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Received: by 10.114.77.38 with HTTP; Wed, 18 Feb 2015 10:53:51 -0800 (PST) In-Reply-To: <878ufvqdu0.fsf@nyu.edu> References: <87lhjws8ci.fsf@heimdali.yagibdah.de> <28267.1424201355@ccs.covici.com> <878ufvqdu0.fsf@nyu.edu> From: =?UTF-8?B?Q2FuZWsgUGVsw6FleiBWYWxkw6lz?= Date: Wed, 18 Feb 2015 12:53:51 -0600 Message-ID: Subject: Re: [gentoo-user] syslog-ng: how to read the log files To: gentoo-user@lists.gentoo.org Content-Type: multipart/alternative; boundary=001a11c3c96650551b050f61585f X-Archives-Salt: ca4100f0-59dd-48be-8b5c-0b353f0d9278 X-Archives-Hash: 66115f7ac416eff53041acc42cb7600b --001a11c3c96650551b050f61585f Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Wed, Feb 18, 2015 at 12:22 PM, wrote: > > On Tue, Feb 17 2015, Canek Pel=C3=A1ez Vald=C3=A9s wrote: > > > On Tue, Feb 17, 2015 at 2:29 PM, wrote: > >> > >> I wonder if the OP is using systemd and trying to read the journal > >> files? > > > > Those live under /var/lib/journal (which you need to create; Gentoo doesn't > > do it by default last time I saw), > > Wow! I just checked and indeed I do not have /var/lib/journal. > I run systemd (thanks to canek) and use journalctl, which I *thought* > was displaying the journal). The journal works without permanent storage (one more of its many advantages); in that case, it keeps a small amount of logs in memory (you can set how much memory to reserve for it). > Need I make some changes? Only if you want to have logs in permanent storage. In that case, you only need to create the /var/log/journal dir with systemd-journal GID, and 2755 permissions (with setgid). systemd-journald will automatically rotate the logs when they use 10% of the free disk available (you can also change that). Since the logs are compressed and indexed, each entry on them is accesible in O(1), and they don't use that much space (with 280 megabytes reserved in my laptop for journal logs, I have logs since Sep 20, 2014; that's 5 months worth of logs, although my laptop doesn't run that many daemons). Anyway, the journal works perfectly without permanent storage (as you can see); if you are happy that way, you don't need to enable it. Regards. -- Canek Pel=C3=A1ez Vald=C3=A9s Profesor de asignatura, Facultad de Ciencias Universidad Nacional Aut=C3=B3noma de M=C3=A9xico --001a11c3c96650551b050f61585f Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
On Wed, Feb 18, 2015 at 12:22 PM, <gottlieb@nyu.edu> wrote:
>
> On Tue, Feb= 17 2015, Canek Pel=C3=A1ez Vald=C3=A9s wrote:
>
> > On Tue,= Feb 17, 2015 at 2:29 PM, <covi= ci@ccs.covici.com> wrote:
> >>
> >> I wonder= if the OP is using systemd and trying to read the journal
> >>= files?
> >
> > Those live under /var/lib/journal (which = you need to create; Gentoo doesn't
> > do it by default last t= ime I saw),
>
> Wow!=C2=A0 I just checked and indeed I do not h= ave /var/lib/journal.
> I run systemd (thanks to canek) and use journ= alctl, which I *thought*
> was displaying the journal).

The jo= urnal works without permanent storage (one more of its many advantages); in= that case, it keeps a small amount of logs in memory (you can set how much= memory to reserve for it).

> Need I make some changes?

On= ly if you want to have logs in permanent storage. In that case, you only ne= ed to create the /var/log/journal dir with systemd-journal GID, and 2755 pe= rmissions (with setgid). systemd-journald will automatically rotate the log= s when they use 10% of the free disk available (you can also change that).<= div>
Since the logs are compressed and indexed, each entry on= them is accesible in O(1), and they don't use that much space (with 28= 0 megabytes reserved in my laptop for journal logs, I have logs since Sep 2= 0, 2014; that's 5 months worth of logs, although my laptop doesn't = run that many daemons).

Anyway, the journal works perfectly without = permanent storage (as you can see); if you are happy that way, you don'= t need to enable it.

Regards.
--
Canek Pel= =C3=A1ez Vald=C3=A9s
Profesor de asignatura, Facultad de Ciencias
Uni= versidad Nacional Aut=C3=B3noma de M=C3=A9xico
--001a11c3c96650551b050f61585f--