3 ms·

How do you try to copy Windows NT's Event Log — which is essentially unchanged from the 1990s when systems ran on 32MB of RAM or less — and fail so spectacularl

How do you try to copy Windows NT's Event Log — which is essentially unchanged from the 1990s when systems ran on 32MB of RAM or less — and fail so spectacularly? The first thing I do on a Linux system is install a proper syslog daemon.

rasz 2mo ago
One of the first things I do on win10 is disable most of excess logging.
- breakingcups 2mo ago
  But why, though? I have never seen a performance hit from it that would warrant that.
  - rasz 2mo ago
    Dont like SSD wear for no reason. I wont look at those logs anyway on my personal gaming pc so its all useless.
    - pudgywalsh 2mo ago
      Your issue is greatly exaggerated. Enterprise users increase the logging and I've never heard of premature SSD failure due to this. The event log is capped in size (adjustable). It's nominally < 100MB. Your games continually dumping GBs of data into local cache on the other hand...
      - rasz 2mo ago
        Size cap doesnt mean much when its a constant stream of small writes.
- sidewndr46 2mo ago
  How do you do that?
  - rasz 2mo ago
    Painfully and slowly clicking one item at a time in computer management/event viewer/windows logs/applications and services :| Im sure this can be automated, but I want to see what Im disabling instead of going bulk all.
throw-the-towel 2mo ago
Which log daemon do you use?
- edoceo 2mo ago
  syslog-ng FTW! Been using it since like 2003. Great router tools in the conf, network support, crazy regex rules for when you're trying to tune your syslog collector system after a few beers. Even has this awesome (footgun?) feature that lets me pipe matching lines to other tools I wrote (also beer influenced).
ButlerianJihad 2mo ago
https://utcc.utoronto.ca/~cks/space/blog/linux/SystemdJournalAndPlaintextLogs https://utcc.utoronto.ca/~cks/space/blog/linux/SystemdJourna... "The systemd journal doesn't force you to not have plain text logs" -- Chris Siebenmann (2024-06-30)

rasz 2mo ago

One of the first things I do on win10 is disable most of excess logging.

breakingcups 2mo ago
But why, though? I have never seen a performance hit from it that would warrant that.
- rasz 2mo ago
  Dont like SSD wear for no reason. I wont look at those logs anyway on my personal gaming pc so its all useless.
  - pudgywalsh 2mo ago
    Your issue is greatly exaggerated. Enterprise users increase the logging and I've never heard of premature SSD failure due to this. The event log is capped in size (adjustable). It's nominally < 100MB. Your games continually dumping GBs of data into local cache on the other hand...
    - rasz 2mo ago
      Size cap doesnt mean much when its a constant stream of small writes.
sidewndr46 2mo ago
How do you do that?
- rasz 2mo ago
  Painfully and slowly clicking one item at a time in computer management/event viewer/windows logs/applications and services :| Im sure this can be automated, but I want to see what Im disabling instead of going bulk all.

throw-the-towel 2mo ago

Which log daemon do you use?

edoceo 2mo ago
syslog-ng FTW! Been using it since like 2003. Great router tools in the conf, network support, crazy regex rules for when you're trying to tune your syslog collector system after a few beers. Even has this awesome (footgun?) feature that lets me pipe matching lines to other tools I wrote (also beer influenced).

ButlerianJihad 2mo ago

https://utcc.utoronto.ca/~cks/space/blog/linux/SystemdJournalAndPlaintextLogs https://utcc.utoronto.ca/~cks/space/blog/linux/SystemdJourna... "The systemd journal doesn't force you to not have plain text logs" -- Chris Siebenmann (2024-06-30)