[rsyslog-notify] Forum Thread: Re: demolish the syslog system - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26215#p26215

Message: 
----------
[quote:3vyxu799]My opinion is that the WORKING logging system is
FUNDAMENTAL for every operating systems. And not by the users. And should
not have to let to upgrade without it.[/quote:3vyxu799]

We fully agree. You seem to be angry at us for the changes to your system.
Your anger is misplaced, you need to be upset at Suse and the systemd
developers, not us. The systemd people believe that they know what you want
and all that you need is what they give you. The systemd developers have
made it so that you have to understand their system, at least a little bit,
in order to use anything else. You are going to have to understand whatever
logging system you select in order to use it.

now that we understand that the problem is that the new Suse build is
systemd journal only, it makes it a lot easier to understand what's going
on.

So to run rsyslog on a systemd system, you have two basic options

1. work to disable the systemd journal as much as possible so that
rsyslog/syslog-ng can receive logs as they traditionally have

2. configure rsyslog/syslog-ng to retrieve logs from the systemd journal

If you go the first route, you will have to lookup how to make the systemd
journal not grab /dev/log. once you do that, you can basically ignore the
journal and rsyslog/syslog-ng will work as they traditionally have

If you go the second route, all logs will go to the systemd journal, and
then be retrieved by the syslog daemon. This is more overhead, and you have
to worry about the space used by the systemd journal as well as what the
syslog daemon does with the logs. If you go this route with rsyslog, you
will need to configure imjournal to retrieve the logs. this would replace
the imuxsoc module. If you aren't doing remote logging, you shouldn't need
imudp or imtcp. Once you get the appropriate input module configured, the
rest of your config should work