Russ Allbery <r...@debian.org> writes: > Simon McVittie <s...@debian.org> writes: > >> I know fail2ban and logcheck do read plain-text logs (although as >> mentioned, fail2ban already has native Journal-reading support too), and >> I would guess that fwlogwatch, snort and xwatch probably also read the >> logs. > > logcheck also has native journal-reading support. > > Note that its dependency is only Suggests. I have not checked if that's > there for some other reason.
(oops, I thought i'd read to the end of the thread!) The suggests is only retained for non-systemd users, since without some logging thing, logcheck isnt going to do much out of the box. It would ideally recommend: - journal| rsyslog| system-log-daemon (if under systemd) - rsyslog | rystem-log-daemon (if not) but that seemed too hard withough potentialy installing systemd or rsyslog on systems that dont want them.
