On Thu, 23 Feb 2023 21:12:23 +0100 Michael Biebl <bi...@debian.org> wrote:
> Am 23.02.23 um 18:44 schrieb Simon McVittie:
> > According to
> > https://lists.debian.org/debian-backports/2023/02/msg00008.html
> > it seems that people might be (rightly or wrongly) relying on the old
> > timestamp format, and the ability to read messages from /var/log/messages.
> >
> > I think it would be more obvious that these are intentional changes if
> > there was a NEWS entry for the bullseye -> bookworm

> Do you think I can copy the changelog from [1] or does it have too
> much/little detail?
>
> [1]
> https://tracker.debian.org/news/1379692/accepted-rsyslog-822100-3-source-into-unstable/
>

As a user it would really help to have this in rsyslog's NEWS.Debian.
I've been using rsyslog for a long time but ive never had to customise
it before, and while im sure there was a reason for this change it
does make the logs longer, less readable, and different to what you
get from journalctl. Im not complaining - im sure the new format is
better, but i think a log of people might need some
help understanding it

This change also breaks most people's locally-written logcheck rules.
We are trying to explain how users
can update everything via logcheck's NEWS.Debian (#1033059) and I
expect it breaks other consumers of syslog files as well. Which is
fine, but better to have it documented if we can

If it helps, the information i would be hoping to see in NEWS.Debian
from rsyslog is:
- what has changed
- why it was changed - from the pov of a casual user, i didn't find
the 'benefits' listed in the tracker link before very compelling, but
it would be better than nothing. Is the point that if you have
huge numbers of log messages a second (is this likely?) a more precise
timestamp is needed to allow accurate sorting? (but isn't the log
already in a sorted order?)
- and especially: how to change/revert/customise it, as this is not
obvious for a casual user: i tried and failed to quickly locate this
info in the man-page! (or if the old format is not supported any
more then definitely include that)

Happy to help with drafting - I have started something for the release
notes here:
https://salsa.debian.org/ddp-team/release-notes/-/merge_requests/150

- grateful for any views from you on that as well, if you have time

Reply via email to