If I’m using Arch or another minimal distro, is it a good idea to install a syslog daemon? Or can I go without?

  • Mactan@lemmy.ml
    1·
    4 months ago

    wish I knew how to use the journal, seems like there isn’t any good way to just search the previous session’s logs without a mountain of fuss or having to guess file names

    • MummifiedClient5000@feddit.dkEnglish
      2·
      4 months ago

      Check that you actually have persistent storage enabled. (See man journald.conf and search for Storage)

      Read up on the numerous parameters to journalctl. (man journalctl)

      journalctl --boot -2 will show logs from previous boot.

      journalctl --since "-2 weeks" --unit=sshd last two weeks worth of sshd logs.