On February 5, 2020 6:49:07 AM UTC, Michael Biebl <bi...@debian.org> wrote:
>Am 05.02.20 um 07:01 schrieb Scott Kitterman:
>
>> Not particularly useful IMO. In /var/log/mail.log I can see log
>entries from
>> all the programs configured to log to the mail facility. That way I
>can see
>> the interaction between them. On a typical server that is for
>sending mail I
>> often need to see log entries from postfix, clamsmtp, and
>dkimpy-milter
>> together to understand how a message is (or isn't) making it through
>the
>> system.
>>
>> Of course the fact that I can't use all the tools available to
>manipulate text
>> files to follow or analyze logs is problematic. If I'm using
>journalctl, how
>> do I replicate 'tail -f /var/log/mail.loog'?
>
>journalctl -f SYSLOG_IDENTIFIER=2
>
>You can also apply additional filters, like severity and much more.
>
>https://www.digitalocean.com/community/tutorials/how-to-use-journalctl-to-view-and-manipulate-systemd-logs
>has a quite well written introduction
>
>HTH,
>Michael
Not really. Nothing in the link addresses my question.
Do syslog facilities really have to be addressed by number rather than name?
That seems like a horrible interface.
Scott K
