[rsyslog-notify] Forum Thread: Re: Configuration advice, rolling my own syslog server. - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24217#p24217

Message: 
----------
as for the difference between the centos and ubuntu containers, look for
what's different between them. Is it something that CentOS with SELinux
disabled allows you to access that Ubuntu with AppArmor _enabled_ doesn't?
is there something in /proc or /sys that's different? are there different
kernel versions in the different distros?

I'd have to look at exactly what rsyslog is accessing, but it really
doesn't make sense to have loggers in the container reading the logs from
the main kernel, you have race conditions as to which copy of the logger
will see any given message.