Hi,
Yes, i see now from this redhat article
(https://access.redhat.com/articles/4058681) that creating
/etc/systemd/system/rsyslog.service.d/logging.conf with:
[Unit]
Requires=syslog.socket
[Install]
Alias=syslog.service
and then setting ForwardToSyslog in journald.conf and disabling
imjournal in rsyslog.conf is the way to go for EL8.
Thank you.
On 7/1/24 19:53, Sean Maguire via rsyslog wrote:
Hi Ricardo,
That meant that rsyslog would listen on that socket and journald would send
log entries there. See "ForwardToSyslog" in journald.conf (5). Now the
default is to use the rsyslog "imjournal" module to get logs from the
journal.
We (I) always change the setting on our servers to the earlier
configuration due to warnings about performance in
https://urldefense.com/v3/__https://rsyslog.readthedocs.io/en/latest/configuration/modules/imjournal.html__;!!ACWV5N9M2RV99hQ!IA3YQfazAz_LJq2HmXkGfoB40V_8Z1ImfYrcsH4_x7EQYopjlzz1UylpReiin0INCaU8pRfZh0WJQjNEx_9yjOtVI6R8bw$
.
-Sean
On Mon, Jul 1, 2024 at 5:47 AM Ricardo Esteves via rsyslog <
rsyslog@lists.adiscon.com> wrote:
Hi,
On RHEL7 (and clones) systemd package included /etc/rsyslog.d/listen.conf:
$SystemLogSocketName /run/systemd/journal/syslog
which made rsyslog get the logs from journald right?
On RHEL8 (and clones) this file is not included anymore. Does anyone
knows why?
I see that on RHEL8 rsyslog.conf now includes the module imjournal to
get the logs directly from journald db.
Though on rsyslog documentation says its not recommended because is
quite heavy.
Is the documentation still accurate about this? If yes what would be the
correct way (less heavy) to get logs from journald into rsyslog?
Best regards,
Ricardo Esteves.
_______________________________________________
rsyslog mailing list
https://urldefense.com/v3/__https://lists.adiscon.net/mailman/listinfo/rsyslog__;!!ACWV5N9M2RV99hQ!IA3YQfazAz_LJq2HmXkGfoB40V_8Z1ImfYrcsH4_x7EQYopjlzz1UylpReiin0INCaU8pRfZh0WJQjNEx_9yjOssmaFpfA$
https://urldefense.com/v3/__http://www.rsyslog.com/professional-services/__;!!ACWV5N9M2RV99hQ!IA3YQfazAz_LJq2HmXkGfoB40V_8Z1ImfYrcsH4_x7EQYopjlzz1UylpReiin0INCaU8pRfZh0WJQjNEx_9yjOvYPApDjQ$
What's up with rsyslog? Followhttps://urldefense.com/v3/__https://twitter.com/rgerhards__;!!ACWV5N9M2RV99hQ!IA3YQfazAz_LJq2HmXkGfoB40V_8Z1ImfYrcsH4_x7EQYopjlzz1UylpReiin0INCaU8pRfZh0WJQjNEx_9yjOv60f5uXQ$
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
https://urldefense.com/v3/__https://lists.adiscon.net/mailman/listinfo/rsyslog__;!!ACWV5N9M2RV99hQ!IA3YQfazAz_LJq2HmXkGfoB40V_8Z1ImfYrcsH4_x7EQYopjlzz1UylpReiin0INCaU8pRfZh0WJQjNEx_9yjOssmaFpfA$
https://urldefense.com/v3/__http://www.rsyslog.com/professional-services/__;!!ACWV5N9M2RV99hQ!IA3YQfazAz_LJq2HmXkGfoB40V_8Z1ImfYrcsH4_x7EQYopjlzz1UylpReiin0INCaU8pRfZh0WJQjNEx_9yjOvYPApDjQ$
What's up with rsyslog? Followhttps://urldefense.com/v3/__https://twitter.com/rgerhards__;!!ACWV5N9M2RV99hQ!IA3YQfazAz_LJq2HmXkGfoB40V_8Z1ImfYrcsH4_x7EQYopjlzz1UylpReiin0INCaU8pRfZh0WJQjNEx_9yjOv60f5uXQ$
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
