Originally posted by johnc
View Post
On systemd systems all the logging is collated into a single view of the system. The user doesn't even have to care about path's.
On non-systemd systems there are usually only very crude tools dedicated for viewing the log files. So in order to examine the log files, you have to use many different tools and understand the concept of piping. A "grep error <path>" will fail to find lines with "Error, Err, err" or where the keyword is "Failure, fail, etc"
There is also the circular problem of before you can grep, you need to now what is in the log file in order to know what to grep for in the log file.
On systemd systems there is a dedicated tool that helps with viewing and filtering the log file. The new user only have to learn one tool in order to view logfiles in an intelligent an useful way. In fact, just a copy-paste of a generic commands like "journalctl -p err" or "journalctl -b1 -p err" can supply them with information about what went wrong.
Not only that, since the systemd journal is structured and indexed and has a stable API, it is possible to make GUI's to actually view and sort in the log files. So a simple user can peruse the journal by clicking on an icon.
It is more or less impossible to make a GUI log file viewer for syslog files that actually does any kind of sorting of the view, since there is no API and the text logs are more or less unstructured.
systemd's journal is logging done right so even newbies will now be able to view and sort in their systems log files.
Comment