I am fairly new to Linux and decided a couple of months ago to use Manjaro as the OS of my choice.
The last couple of weeks I read a few articles about systemd and journalctl and realized how crucial it is to regularly look at the logs to effectively manage and maintain my system.
This leads me to constantly ask myself, if there is a more sane way to analyze logs. Specifically, I would expect a component to exist, which monitors journalctl and notifies me upon suspicious entries (i.e. about hardware or logon attempts), which require special attention.
While reading this forum and others I stumbled across The-Compiler/journalwatch, pentix/qjournalctl and other rather outdated projects. Isn't there a popular monitoring and notification system which is capable of aggregating log entries? In order to not miss them it would also be nice if it could e-mail me about incidents or at least use the XFCE notification system to pop them up.
My NAS has this capability (Synology), so I thought that it would be a really good idea to have something similar on my computers. Or am I missing something and is it perhaps a bad idea to work with logs in this way?