[systemd-devel] Backup the current boot logs in raw format

[Francis Moreau]

On Wed, Jul 24, 2019 at 4:08 PM Zbigniew Jędrzejewski-Szmek
<zbyszek at in.waw.pl> wrote:
> you can export and write to a journal file with:
>   journalctl -o export ... | /usr/lib/systemd/systemd-journal-remote -o /tmp/foo.journal -
> This has the advantage that you can apply any journalctl filter where
> the dots are, e.g. '-b'.

This doesn't look to work correctly:

$ journalctl -b | head
-- Logs begin at Thu 2017-04-13 14:05:51 CEST, end at Thu 2019-08-01
08:51:39 CEST. --
Mar 25 06:51:35 crapovo kernel: microcode: microcode updated early to
revision 0x25, date = 2018-04-02

$ journalctl -o export -b | /usr/lib/systemd/systemd-journal-remote -o
/tmp/foo.journal -
$ journalctl -b --file=/tmp/foo.journal | head
-- Logs begin at Sat 2019-06-22 18:32:31 CEST, end at Thu 2019-08-01
08:45:45 CEST. --
Jun 22 18:32:31 crapovo polkitd[1278]: Unregistered Authentication
Agent for unix-process:7300:772806437 (system bus name :1.4562, object
path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale
en_US.UTF-8) (disconnected from bus)

As you can see, the start is not the same.

Also are foo.journal data compressed ?

Thank you.
-- 
Francis