June 2025
Beginner to intermediate
1180 pages
37h 48m
English
The systemd init system, described in Chapter 20, Section 20.1, contains its own logging functions, called the journal. The systemd-journald background process is responsible for logging. Compared to traditional syslog services, there are three fundamental differences:
The journal is stored in a binary format to save space. However, this format is also the biggest disadvantage of the journal: countless tools assume that the logging files are available in text format and can be easily analyzed using grep.
The journal is protected against subsequent changes. This makes it impossible for an attacker to remove his or her traces.
The entire journal is stored in one place. The separation into multiple logging files, ...
Read now
Unlock full access