Journalctl is fantastic. Never again do I have to parse different filenames, syslog "fotmats" or locations. It just works. Add journalbeat to ship the logs to e

Journalctl is fantastic. Never again do I have to parse different filenames, syslog "fotmats" or locations. It just works. Add journalbeat to ship the logs to elasicsearch. Since it's all in journalctl, no need to even configure what to ship. Just works. The cherry is it's much harder to fill the disk with logs. No matter the service I'm using the same journalctl command to find what I want. This is why syslog is completely disabled on all our servers