2017-09-20 06:13:40 UTC
journal files in addition to the main journal using some journald
For eg., All journal logs of severity critical and above should be stored
in /var/log/critical/critial.journal in addition to the main journal.
Currently I am achieving this via combination of systemd-journal-remote and
journalctl as below
--output=/var/log/critical/critical.journal --getter="journalctl -f
PRIORITY=3 -o export"
In this approach, I have the following disadvantages
1) For each filter output combination, I need to create additional service
2) Somethings we miss few logs, couldnt root cause it yet.
3) Also I not sure whether this would be a better compared to the
systemd-journald directly storing them in different journal files.
Hence, I prefer a systemd-journald configuration like following
which will store those logs matching the filters to the corresponding