On Sat, 2013-06-15 at 16:33 -0400, Matthew Miller wrote: > On Sat, Jun 15, 2013 at 12:43:53PM -0700, Adam Williamson wrote: > > but it will eventually complete and quiet down. Personally I recommend > > pruning the journal first if you have a huge journal full of those > > SELinux messages - if your system logs aren't that important to you, you > > can safely just blow away the larger (over 10MB) files > > in /var/log/journal and that should trim the journal down to a > > reasonable size. > > It would be handy if there were a journalctl command to force discard logs > from before a certain time or down to a certain size. I tried to look for an > existing RFE for this but couldn't find one, so I filed this: There are settings for rotating / pruning the logs in /etc/systemd/journald.conf , but they don't seem to work terribly well when you have huge single files. A manual discard command might be nice, but what I was thinking of RFE'ing was some kind of rate limiting, especially for identical messages. I'm not sure anyone really _needs_ the same AVC printed into their logs every three seconds; just a note that a given AVC had occurred 1000 times in the last hour or whatever would be sufficient. -- Adam Williamson Fedora QA Community Monkey IRC: adamw | Twitter: AdamW_Fedora | identi.ca: adamwfedora http://www.happyassassin.net -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
