[systemd-devel] Logging in an enterprise environment

[Lennart Poettering]

On Wed, 11.12.13 14:43, Cecil Westerhof (Cecil.Westerhof at Snow.nl) wrote:

> 
> On 12/11/2013 02:25 PM, Cecil Westerhof wrote:
> >>You can to centralized logging with the journal too, by simply making
> >>the journal files you want to look at accessible on the same
> >>machine. This could be done via NFS sharing, or by copying them to a
> >>central host via rsync or scp or even ftp, whatever you
> >>prefer. "journalctl -m" will then be able to coalesce them on display.
> >
> >NFS is not acceptable I am told, but I'll inquire about the other
> >possibilities.
> >
> >By the way: is just copying possible? What if an event is logged at the
> >moment the copy is done?
> 
> I just had a little check. Copying is not acceptable. Logging on the
> log-server should be real-time.

If you want logging on the server in real-time, then use rsyslog.

Lennart

-- 
Lennart Poettering, Red Hat