4 ms·
Filtering journal contents by metadata is known to be unreliable. It's not that the logs are missing, it's that they're not getting included by your query. Th
by newnewpdro 7y ago
Filtering journal contents by metadata is known to be unreliable.
It's not that the logs are missing, it's that they're not getting included by your query.
The way journald associates log lines with process metadata is inherently racy.
This situation has improved some with the metadata caching changes, but IIRC there are still some holes where processes can log without journald associating accurate/up-to-date metadata with the logged info.
- pferde 7y agoThat makes sense, I guess, in a rather warped and bizarre way. The point still stands - journald is unreliable, and after getting burnt like this it will be years before I start trusting it again.
- newnewpdro 7y agoFYI, in case you wanted to document your pain, it might help prioritize fixing it fully: https://github.com/systemd/systemd/issues/2913 https://github.com/systemd/systemd/issues/2913
- dannyw 7y agoGreat, so why don't we just keep text logs as text files?