If I’m using Arch or another minimal distro, is it a good idea to install a syslog daemon? Or can I go without?

  • Mactan@lemmy.ml
    link
    fedilink
    arrow-up
    1
    ·
    26 days ago

    wish I knew how to use the journal, seems like there isn’t any good way to just search the previous session’s logs without a mountain of fuss or having to guess file names

    • MummifiedClient5000@feddit.dk
      link
      fedilink
      English
      arrow-up
      2
      ·
      26 days ago

      Check that you actually have persistent storage enabled. (See man journald.conf and search for Storage)

      Read up on the numerous parameters to journalctl. (man journalctl)

      journalctl --boot -2 will show logs from previous boot.

      journalctl --since "-2 weeks" --unit=sshd last two weeks worth of sshd logs.