From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 191BE138825 for ; Sat, 1 Nov 2014 09:48:08 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id D967CE098A; Sat, 1 Nov 2014 09:47:59 +0000 (UTC) Received: from mail-qa0-f52.google.com (mail-qa0-f52.google.com [209.85.216.52]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id BC8C1E087B for ; Sat, 1 Nov 2014 09:47:58 +0000 (UTC) Received: by mail-qa0-f52.google.com with SMTP id u7so6256881qaz.39 for ; Sat, 01 Nov 2014 02:47:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:content-type; bh=uwcNCgJqPk8qdhZ6ckq8HwvzR5bU1YxC+hI3fr+5TzA=; b=mYUXw3Ucr2i2vSMB3x90F0ZsIBV5ZNXDa6n96xsXXVsKZhNpA6Jiefo8s0Rsh9DW5n W6DQVI3lRh2kj2apBaveByE0ab7hDXwt6EP/PLR3XaAhww2Gb/Mo/2f7f4VV1K70wUs2 +dFIxah/pK9miwndEaC+JMFO+3yNejZqAZcSLFzxt7olwbgB4+oYH7QkJtrLbftoEb4V h44r4A54+oHF3ksa3SYhErOI5nUbfxZakHCPOU8n0XcY9I6G9QDMIl9Ho7I/lcTzglrn USvTFBcBBRNsue8uoqOThYI9pFlTDwrWRbL4AXqepcZ6Ls294RYrNCxI5bYlmiH63LWE MZCA== Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 X-Received: by 10.224.8.66 with SMTP id g2mr34528916qag.12.1414835277863; Sat, 01 Nov 2014 02:47:57 -0700 (PDT) Sender: freemanrich@gmail.com Received: by 10.140.102.134 with HTTP; Sat, 1 Nov 2014 02:47:57 -0700 (PDT) In-Reply-To: <54543167.8020705@alectenharmsel.com> References: <1721456.cxhDToZz1Z@andromeda> <5707050.LYlfBLMIFp@andromeda> <54543167.8020705@alectenharmsel.com> Date: Sat, 1 Nov 2014 05:47:57 -0400 X-Google-Sender-Auth: vXN5VzgduSmA2b1WXkZOJSNdZCQ Message-ID: Subject: Re: [gentoo-user] alternative kernels From: Rich Freeman To: gentoo-user@lists.gentoo.org Content-Type: text/plain; charset=UTF-8 X-Archives-Salt: 57ac309b-6b4e-4784-a567-dd1ef51071f1 X-Archives-Hash: 8b18ee5328275f6f5225e495c9cdda14 On Fri, Oct 31, 2014 at 9:03 PM, Alec Ten Harmsel wrote: > > You guys should check out the ELK stack: > http://www.elasticsearch.org/overview/ > > Basically, transform logs to JSON with logstash, throw the JSON into > elastic search, and make plots with Kibana. We use it at work; it's > absolutely fantastic. > Hmm, as far as I can tell they don't actually have a parser for journal logs yet. With systemd the logs are already available in JSON, though I imagine it would be trivial to transform that to a different-looking JSON if necessary. I think it just reflects the fact that everybody is playing catch-up. Despite originating at Red Hat I suspect that the vast majority of those running systemd right now are the sorts of folks who don't run enterprise log monitoring suites. So, the pressure just isn't there yet to get all that stuff built. -- Rich