On Fri, 2021-01-01 at 12:15 -0500, Matthew Miller wrote:
As we start a new year, I'm thinking about data retention in
general.
:)
In my experience, it's pretty rare on an end-user laptop or desktop
system for
logs from much more than the previous boot to be interesting. Maybe I
occasionally want to look back a little while to see if a problem
just
started. It's exceedingly rare that I need (or want) to look back
more than
a month.
Right now, we don't set MaxRetentionSec, so journal expiry on
Workstation is
entirely based on disk usage.
Logs can accidentally contain sensitive data, and it's just plain
faster to
work with them when there's less. I propose we set this to something
like
six months by default.
Hi,
On RHEL/Centos 7. I notice that log rotate default is 4 weeks , I guess
this is because is the default of Fedora ... . So we should think the
default we use for Fedora one day will be the default for RHEL .
I use 52 weeks in my machines or even 104 weeks if they are important,
because specially on security issues , we need dig for more than 2 or
3 months and for statistic like watch disk usage , etc
Like logrotate, I'd like have journal retention for one year / 52 weeks
.
Best regards,
--
Sérgio M. B.