> From: m.a.yo...@durham.ac.uk > > On Wed, 17 Jul 2013, Lennart Poettering wrote: > > > "cat /var/log/messages" becomes "journalctl" > > "tail -f /var/log/messages" becomes "journalctl -f" > > "tail -n100 /var/log/messages" becomes "journalctl -n100" > > "grep foobar /var/log/messages" becomes "journalctl | grep foobar" > > > > This isn't complex. You can grep/sed/awk as much as you want. You just > > do it over the output of journalctl rather than teh file. That's not > > that big a difference. > > One thing you have missed is how you edit the log file. There may be cases > where you want to strip out log entries, eg. when a process has gone wild > and swamped the useful messages with useless ones and you want to keep the > useful ones and throw away the useless ones.
I used to do something like this with vim ":g/NOISE/d" until I could see the detail I wanted when the alternations for grep would have been tremendously long. With journalctl's built-in filtering capabilities I'm glad I don't have to do that anymore; it's way more concise. However, all use cases differ, so if you must, you can: "journalctl | vim -". YMMV with other editors though. -- John Florian
-- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel
