|
|
|
|
|
|
by ahartmetz
350 days ago
|
|
|
I'm searching for "service name" and I don't care if it comes from "service" or mentions "service". That's unstructured. The rest of your comment doesn't even apply. Search is not parsing and not structured data transfer (which is what binary RPC formats are for), and unless you have a fulltext index, there is no faster way to do it than the usual algorithms, which work at 100+ MB/s. With log files, the text is right there ready to be searched. With journald, it needs to be assembled first, and it's pretty slow in practice. |
|
|