If I’m using Arch or another minimal distro, is it a good idea to install a syslog daemon? Or can I go without?

  • MummifiedClient5000@feddit.dk
    link
    fedilink
    English
    arrow-up
    2
    ·
    4 months ago

    Check that you actually have persistent storage enabled. (See man journald.conf and search for Storage)

    Read up on the numerous parameters to journalctl. (man journalctl)

    journalctl --boot -2 will show logs from previous boot.

    journalctl --since "-2 weeks" --unit=sshd last two weeks worth of sshd logs.