[systemd-devel] Fastest way to dump last X Mo of logs from the journal ?

[Etienne Champetier]

Le jeu. 25 avr. 2024 à 08:38, Lennart Poettering
<lennart at poettering.net> a écrit :
>
> On Do, 25.04.24 12:49, Andy Pieters (systemd at andypieters.me.uk) wrote:
>
> > On Thu, 25 Apr 2024 at 12:48, Lennart Poettering <mzxreary at 0pointer.de>
> > wrote:
> >
> > > On Mi, 24.04.24 14:48, Etienne Champetier (champetier.etienne at gmail.com)
> > > wrote:
> > >
> > >
> > > what is "last X Mo" supposed to mean? is "mo" supposed to mean months?
> > > thus: show logs from a given number of most recent months? if so, just
> > > use:
> > >
> > > megabytes (mega octets in French)
>
> oh, wow. weird.

My bad, yes I meant MB/megabytes

>
> megabytes of what though? of formatted text? or of a journal file on disk?
>
> such a weird request...

that would be formatted text, even if not the most efficient this is
what is in an sos report today.

'sos report' generates an archive with as much information as possible
to give to your support team / dev team,
you want as much log as possible but by default you need a reasonable
size limit so that you don't fill up your ticketing system.
The size limit doesn't need to be extremely precise.

Etienne

> Lennart
>
> --
> Lennart Poettering, Berlin