77
systemd(ont)
(www.arscyni.cc)
Because of the ubiquity, nay, monopoly of systemd I always assumed it was miles ahead of other init systems. Nope. I've been using a non-systemd environment for a while and must say I'm surprised by how little breaks, i.e., next to nothing. Moreover, boot and shutdown times are faster, and more of that good stuff. I suggest trying it out.
Can you add more fields? Is there no ambiguity in context switching? No breakage around whitespace?
If so, sure, that's fine then.
They both get ingested into Splunk (or whatever tool is used by the company) in any context where this would be a problem. It's one of those things that in practice has never been a problem in my experience.
By the point/scale that context switching, log injection (forging) whitespace is a concern, I'm not piping shell commands. It's over engineered.
Nah, the issue is accidental corruption, different parsers doing things differently, stuff like that. Happens often with “mostly text but actually some structured data also” formats, doesn't happen with formats that have well specified framing.