Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

afaik journald can just forward logs via rsyslog directly to a remote server

Why would it need to store plaintext locally?



Doesn't that still involve a conversion? I believe that rsyslog can read the journald database, but you're typically not querying syslog data directly, so there's a conversion between rsyslog and logstash, Splunk, Datalog, whatever.


Some folks like having some local storage to act as a buffer in case the remote syslog server is down. Not sure if journald can do that on its own.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: