Brummbaer

I’m speaking about the firmware and other blobs that are there because devices wouldn’t work without it.

https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tree/WHENCE

Nice, something running in an eBPF context with a blob in the middle, what could go wrong …

Also there are already a lot of binary blobs in the kernel, that also makes me nervous a bit.

What are you using to ship the logs to VL?

If you want to exclude “normal” logs you should start excluding them before they reach VL, so the only logs you have are the interesting ones.

The more you can filter and label at the source, the less you have to work out in VL.

I use alloy (which is kinda heavy) to extract and prepare only the data I want and it works great so far.