~/talk

A powerful logs management solution we all have and use, but we underestimate

Talkat DevOpsDays Geneva 2024 · 2024-05-13..05-14· [observability]
slides:none on file

Claims that systemd journal is an underrated, production-ready log database: it indexes all fields and values with append-only binary files, offers forward-secure sealing, and recovers corrupted chains; libsystemd lets queries open journal files directly so no central server is required. Netdata improves journalctl performance by ~14×, built log2journal runs anywhere to structure and ingest nginx/HAProxy logs, and provides remote upload/remote replication. Demo scales to ~15 million entries, samples up to 1,000,000 raw rows, and uses only a few megabytes of RAM.

AI-written summary · about

  1. 0:00Netdata and systemd journal
  2. 6:43systemd journal underrated
  3. 13:27systemd journal as database
  4. 17:39Netdata for journal improvement
  5. 24:04Logs management pipeline
  6. 25:50Key journal fields
  7. 26:55Visualizing logs at scale
  8. 28:38Q&A retention and replication
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.