[systemd-devel] Logging in an enterprise environment

[Cecil Westerhof]

On 12/11/2013 02:25 PM, Cecil Westerhof wrote:
>> You can to centralized logging with the journal too, by simply making
>> the journal files you want to look at accessible on the same
>> machine. This could be done via NFS sharing, or by copying them to a
>> central host via rsync or scp or even ftp, whatever you
>> prefer. "journalctl -m" will then be able to coalesce them on display.
>
> NFS is not acceptable I am told, but I'll inquire about the other
> possibilities.
>
> By the way: is just copying possible? What if an event is logged at the
> moment the copy is done?

I just had a little check. Copying is not acceptable. Logging on the 
log-server should be real-time.