The Wanderer <[email protected]> writes:

> Where do you get the idea that John is saying that nano, busybox, etc.,
> can view systemd journal files?

I’m not a Nano user, but I just tested it, and it appears that you can
achieve the same result as "C-u M-! journalcl RET" in Emacs by pressing
Ctrl-T and executing journalctl. In most scenarios, it truly does not
make a significant difference whether you are working with text files
directly or the output from journalctl(1). Any in many cases, analyzing
logs with journalctl is significantly easier than with grep etc.

Often times, you want to only read log entries from a particular
service, in some specific time range, and that can be pretty difficult
with text log files, rotated into multiple separate files. Compared to
e.g.

journalctl -u ssh --since="09:00:00" --until="17:00:00" --grep "invalid format"

But yes, if you need to analyze journal files in a system that lacks the
journalctl program, you're out of luck. I am certain there are numerous
other disadvantages to binary journal files as well. There is a tradeoff
in everything. Sometimes it makes sense to run rsystlog in addition to
journald to get both log formats.

Reply via email to