[Cialug] journelctl

[L. V. Lammert]

On Sun, 18 Sep 2016, Jeffrey Ollie wrote:

> rsyslog may or may not have helped you depending on why the journal
> entrieswent missing. If the disk that logs are stored on filled up, or
> filesystemcorruption made the log files disappear rsyslog wouldn't have
> helped.
>
It wasn the disk, .. plenty of space. I suspect some sort of hardware
failure,

> Really, the only thing that guarantees that logs are saved in the
> case ofproblems like that is streaming the logs in real time to another
> system.Things like graylog, elasticsearch/logstash, and Splunk are
> helpful here,but they can be resource intensive to run.
>
Just seems weird that journelctl isn't good about preserving information,
.

	Thanks!

	Lee