Logging on Linux Café

Taming Container Logs with Podman and systemd-journald

Sat, 11 Jul 2026 08:25:55 +0200

Introduction to Container Logs

I’ve been running a homelab with various self-hosted services for a while now, and managing container logs has been a challenge. With containerization making it easy to spin up multiple containers, keeping track of their logs can be overwhelming. In my experience, using Podman and systemd-journald has been a game-changer for taming container logs.

What are Container Logs?

Container logs are essentially the output of a container’s stdout and stderr streams. They contain valuable information about the container’s execution, such as errors, warnings, and debug messages. By default, container logs are stored in the container’s filesystem, which can lead to log rotation issues and make it difficult to manage logs across multiple containers. I’ve seen this go wrong when logs start filling up the container’s disk space, causing all sorts of issues.

Taming journalctl: Tips for Filtering Out Noise and Finding Useful Error Messages in Your System Logs

Wed, 01 Jul 2026 09:40:00 +0200

Introduction to journalctl

I’ve been using Linux for years, and journalctl has become an essential tool in my daily workflow. If you’re like me, you’re probably familiar with the journalctl command, which is used to query and display logs from systemd’s journal. However, with the vast amount of data that’s logged, it can be overwhelming to sift through and find the information you need. In this article, I’ll share some practical tips and tricks for filtering out noise and finding useful error messages in your system logs using journalctl.

Taming Log Noise with jq and yq: Extracting Insights from Messy JSON and YAML Logs

Sun, 28 Jun 2026 09:47:47 +0200

Introduction to Log Noise

I’ve spent countless hours digging through log files to troubleshoot issues or monitor system performance. But let’s be real, log noise can quickly become overwhelming. I’ve seen this go wrong when you’re dealing with massive log files and no clear way to extract valuable insights. Recently, I’ve been working with increasingly complex JSON and YAML logs, which led me to explore tools like jq and yq to tame the noise. Don’t bother with trying to parse these logs manually - it’s a recipe for disaster.

Taming Log Noise with jq and yq: Extracting Insights from Messy JSON and YAML Logs

Sun, 14 Jun 2026 08:17:40 +0200

Introduction to Log Noise

I’ve seen log files become increasingly cluttered over the years, making it tough to find the information I need. With the complexity of modern systems, log noise has become a significant problem. Log noise refers to the unnecessary or redundant information in log files that can make it difficult to extract valuable insights. In this article, I’ll explore how to tame log noise using jq and yq, two powerful command-line tools for parsing JSON and YAML data.

Taming Duplicate Logs with uniq, sort, and a Dash of jq

Mon, 18 May 2026 10:31:59 +0200

Introduction to Log Management

As a Linux user, you’re probably familiar with the importance of logs. I’ve seen this go wrong when trying to debug an issue or monitor system performance - duplicate logs can be overwhelming. In this article, we’ll explore how to remove duplicates using uniq, sort, and jq.

Understanding the Problem

Duplicate logs can come from multiple sources: multiple instances of the same service, redundant logging mechanisms, or simple configuration mistakes. The real trick is to identify the cause and develop a strategy for removing duplicates. Don’t bother with trying to manually sift through logs - that’s a surefire way to waste time and miss important trends.

Introduction to the Elastic Stack

Wed, 15 Jan 2025 00:00:00 +0000

The Elastic Stack, commonly referred to as the ELK Stack, is a suite of open-source tools designed for search, logging, and analytics. The stack consists of Elasticsearch, Logstash, Kibana, and (later additions like) Beats, providing a comprehensive solution for collecting, storing, analyzing, and visualizing data.

Whether you’re building a search engine, monitoring infrastructure logs, or analyzing security events, the Elastic Stack offers a flexible and scalable platform for handling data at scale. This post explores the key components, features, and use cases of the Elastic Stack.

Understanding Rsyslog

Sat, 26 Oct 2024 00:00:00 +0000

In Linux, system logs are essential for monitoring performance, troubleshooting issues, and maintaining security. rsyslog is a powerful and flexible logging system widely used in modern Linux distributions. It offers high performance, advanced filtering, and support for various output formats, making it a valuable tool for managing logs effectively.

What is Rsyslog?

rsyslog stands for “Rocket-fast System Logging.” It is an enhanced version of the traditional syslog system, designed to handle high-speed log processing while offering advanced capabilities like: