You can. Most Linux users can't -- I say 90%, if not 99%. Most Linux users are just users, many of which don't know how to use tar or xargs without looking it up, very few have the technical knowledge and capability of figuring out "what broke it".
`journalctl --grep="search string"`
You can limit it by time period like this:
`journalctl --since=-6h --grep="search string"`
Note that there's a separate user journal (such as for things that show up with an indication in the systray), accessible like this when in a shell as that user:
`journalctl --user --since=-6h --grep="search string"`
Also, if you really want, SysV still exists and works. You can setup a system with SysV and syslog-ng and have the good ol' service run system and flat log files back.
I’m not a gnu vs linux pedant, but gnu never let me down like that, and linux is really just an implementation detail underneath that I’m free to replace without compromising key functionality.
Besides that, you never wait for updates to install.