The basic run show log command uses journalctl, but run show log tail <num> still reads from /var/log/messages. That means it's missing out the ANSI colors and may be slower than a direct read from the binary format.