News for hackers. Stuff that matters.
Re:Systemd has been a complete, utter, unmitigated success by akdev1l on Wednesday July 09, 2025 @12:08PM (#44511751)
afaik journald can just forward logs via rsyslog directly to a remote server

Why would it need to store plaintext locally?

Re:Systemd has been a complete, utter, unmitigated success by mrweasel on Wednesday July 09, 2025 @12:45PM (#44512177)
Doesn't that still involve a conversion? I believe that rsyslog can read the journald database, but you're typically not querying syslog data directly, so there's a conversion between rsyslog and logstash, Splunk, Datalog, whatever.
Re:Systemd has been a complete, utter, unmitigated success by NewJazz on Thursday July 10, 2025 @11:29AM (#44522111)
Some folks like having some local storage to act as a buffer in case the remote syslog server is down. Not sure if journald can do that on its own.