Summary
In this chapter, we covered the journald logging system and compared it to the tried-and-true rsyslog. First, we looked at the pros and cons of both rsyslog and journald. Then, we saw how the two logging systems are implemented in both Ubuntu and RHEL distros. After that, we saw the various viewing, searching, and formatting options that we can use with the journalctl utility. We wrapped up by learned how to make our journald log files more tamper-resistant and briefly discussed setting up a centralized journald log server.
In the next chapter, we'll look at using systemd's own network services. I'll see you there!
