Re: rsyslog / journald - el7 vs el8

[Lennart Poettering <lennart@xxxxxxxxxxxxxx>]

On Mo, 01.07.24 13:15, Ricardo Esteves (ricardo.lopes.esteves@xxxxxxxxxx) wrote:

> Hi,
>
> On RHEL7 (and clones) systemd package included /etc/rsyslog.d/listen.conf:
> $SystemLogSocketName /run/systemd/journal/syslog
>
> which makes rsyslog get the logs from journald.
>
> On RHEL8 (and clones) this file is not included anymore. Does anyone knows
> why?
>
> I see that on EL8 rsyslog.conf now includes the module imjournal to get the
> logs directly from journald db.
>
> Though on rsyslog documentation says its not recommended because is quite
> heavy.
>
> What would be the correct way (less heavy) to get logs from journald into
> rsyslog on EL8?

That sounds like a question for the rsyslog community. This here is a
systemd mailing list.

Lennart

--
Lennart Poettering, Berlin