[systemd-bugs] [Bug 77013] New: RFE: journald to send logs via network

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=77013

          Priority: medium
            Bug ID: 77013
          Assignee: systemd-bugs at lists.freedesktop.org
           Summary: RFE: journald to send logs via network
        QA Contact: systemd-bugs at lists.freedesktop.org
          Severity: normal
    Classification: Unclassified
                OS: All
          Reporter: duncan at innes.net
          Hardware: Other
            Status: NEW
           Version: unspecified
         Component: general
           Product: systemd

Functionality that exists in rsyslogd to send logs to remote locations on the
network should be replicated in jornald.

This would avoid the requirement for external programs shipping journalctl
entries.

The option to transmit data over encrypted connections would be beneficial.

The option to transmit data as JSON would also be beneficial.

The ability to add custom tags to JSON output would assist larger
organisations.

Use case:

It's hard to think of an organisation that doesn't consolidate it's logs in
some way on a centralised system.  Whilst there may be external processes (e.g.
rsyslog) that can fill this gap, a native feed from journald would be the
cleanest method from the end-user perspective.

Encrypted transmission would satisfy the security aspect of the transmission.

The ability to transmit as JSON would fit in with the way that many centralised
log storage mechanisms are going (especially the open source ones).

The ability to insert custom tags & data to JSON would allow larger
organisations to group data by system type without having to parse data and
amend it before inserting it into the database of choice.  (e.g. all clustered
servers could add a "cluster_name": "$CLUSTER_NAME" field to allow logs to be
viewed by cluster rather than individual hosts.)  Some of this can be done by
tasks/filters on the central system, but the ability for clients to add custom
tags reduces the overall load & complexity of the system.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/systemd-bugs/attachments/20140403/1c47c41a/attachment.html>