Hi,
On RHEL7 (and clones) systemd package included /etc/rsyslog.d/listen.conf:
$SystemLogSocketName /run/systemd/journal/syslog
which makes rsyslog get the logs from journald
On RHEL8 (and clones) this file is not included anymore. Does anyone knows why?
I see that on EL8 rsyslog.conf now includes the module imjournal to get the logs directly from journald db.
Though on rsyslog documentation says its not recommended because is quite heavy.
What would be the correct way (less heavy) to get logs from journald into rsyslog on EL8?
On RHEL7 (and clones) systemd package included /etc/rsyslog.d/listen.conf:
$SystemLogSocketName /run/systemd/journal/syslog
which makes rsyslog get the logs from journald
On RHEL8 (and clones) this file is not included anymore. Does anyone knows why?
I see that on EL8 rsyslog.conf now includes the module imjournal to get the logs directly from journald db.
Though on rsyslog documentation says its not recommended because is quite heavy.
What would be the correct way (less heavy) to get logs from journald into rsyslog on EL8?
