this post was submitted on 23 Sep 2024
771 points (95.5% liked)

linuxmemes

21273 readers
1126 users here now

Hint: :q!


Sister communities:


Community rules (click to expand)

1. Follow the site-wide rules

2. Be civil
  • Understand the difference between a joke and an insult.
  • Do not harrass or attack members of the community for any reason.
  • Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
  • Bigotry will not be tolerated.
  • These rules are somewhat loosened when the subject is a public figure. Still, do not attack their person or incite harrassment.
  • 3. Post Linux-related content
  • Including Unix and BSD.
  • Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of sudo in Windows.
  • No porn. Even if you watch it on a Linux machine.
  • 4. No recent reposts
  • Everybody uses Arch btw, can't quit Vim, and wants to interject for a moment. You can stop now.

  • Please report posts and comments that break these rules!

    founded 1 year ago
    MODERATORS
    771
    submitted 1 month ago* (last edited 1 month ago) by renzev@lemmy.world to c/linuxmemes@lemmy.world
     
    you are viewing a single comment's thread
    view the rest of the comments
    [–] possiblylinux127@lemmy.zip 5 points 1 month ago (6 children)

    The thing with journalctl is that it is a database. Thus means that searching and finding things can be fast and easy in high complexity cases but it can also stall in cases with very high resource usage.

    [–] jj4211@lemmy.world 9 points 1 month ago (4 children)

    Thing is that they could have preserved the textual nature and had some sort of external metadata to facilitate the 'fanciness'. I have worked in other logging systems that did that, with the ability to consume the plaintext logs in an 'old fashioned' way but a utility being able to do all the nice filtering, search, and special event marking that journalctl provides without compromising the existence of the plain text.

    [–] possiblylinux127@lemmy.zip -2 points 1 month ago (3 children)

    Plain text is slow and cumbersome for large amounts of logs. It would of had a decent performance penalty for little value add.

    If you like text you can pipe journalctl

    [–] msage@programming.dev 3 points 1 month ago (1 children)

    But if journalctl is slow, piping is not helping.

    We have only one week of very sparse logs in it, yet it takes several seconds... greping tens of gigabytes of logs can be sometimes faster. That is insane.

    [–] possiblylinux127@lemmy.zip 2 points 1 month ago

    Strange

    Probably worth asking on a technical

    load more comments (1 replies)
    load more comments (1 replies)
    load more comments (2 replies)