On Fri, Dec 12, 2025 at 3:24 PM Roy J. Tellason, Sr. <[email protected]> wrote:
>
> On Thursday 11 December 2025 10:24:21 pm The Wanderer wrote:
> > That's certainly one of the major aspects of the reasons I don't care
> > for the systemd ways of doing logging. I recognize that they have their
> > advantages, and that there are good reasons people went to the trouble
> > of implementing them; I just don't think those advantages outweigh the
> > proprietariness-or-something-similar disadvantages, in most cases.
>
> I'd be interested in hearing what those advantages are.

A couple of reasons come to mind:

* Avoiding injections - Systemd's format makes it easier to parse
logs, and avoid things like fake timestamps injection.
* Remote logging - It ensures an audit trail in case a server is compromised.
* Aggregated logging - dropping logs at a centralized dropping point
for tools like Splunk.

Users can usually achieve the same with a tool like Rsyslog.  Systemd
makes it a core feature.

> I keep bumping into things that are major changes away from what I'm used to
> and understand,  and the first thing that comes to mind for me is "Why?"...

I miss being able to grep my log files, too.  I gave up years ago.

Jeff

Reply via email to