Path: ...!news.roellig-ltd.de!news.mb-net.net!open-news-network.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: Lawrence D'Oliveiro <ldo@nz.invalid>
Newsgroups: comp.os.linux.misc
Subject: Re: More systemdCrap
Date: Tue, 11 Mar 2025 23:42:29 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 20
Message-ID: <vqqhp5$27rt9$1@dont-email.me>
References: <vqn41l$1efis$1@dont-email.me> <vqna2v$1fks2$1@dont-email.me>
	<vqnbm7$1g56j$1@dont-email.me> <gjo3alxe38.ln2@Telcontar.valinor>
	<vqnja1$1hrbi$1@dont-email.me> <rq44alxv4u.ln2@Telcontar.valinor>
	<20250310152856.00004b5a@gmail.com> <vqoqfk$1s78c$3@dont-email.me>
	<h8m5alx305.ln2@Telcontar.valinor> <vqpsct$234iu$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Wed, 12 Mar 2025 00:42:30 +0100 (CET)
Injection-Info: dont-email.me; posting-host="e79dca7698d4321e2270f1d17dc9241d";
	logging-data="2355113"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX1+BLTYF2WxXzr0vxIP/0nnY"
User-Agent: Pan/0.162 (Pokrosvk)
Cancel-Lock: sha1:wM+OXsbmOqNv6cRPKDVSZ1o1OPc=
Bytes: 2183

On Tue, 11 Mar 2025 17:37:33 -0000 (UTC), John McCue wrote:

> I remember people asked for this with journald and the response was to
> somehow pipe the data from journald into syslogd and that would mirror
> it.

The journald config file already has options to mirror things to
syslog, and even not to write anything to the systemd journal files at
all
<https://www.freedesktop.org/software/systemd/man/latest/journald.conf.html>.

> Also if entries are removed from the journal, a log on the remote system
> could be added stating "this entry was deleted by ? on ?".  But maybe
> the design makes this too hard.

The file format is designed to be append-only, for obvious reasons.
But it’s easy enough to extract records and save them to a new
journal-format file
<https://www.freedesktop.org/software/systemd/man/latest/systemd-journal-remote.html>
(or some other format if you prefer).