On Mon, Feb 17, 2025 at 21:41:33 +0100, jman wrote: > If I wanted to remove rsyslog (because I want just one logging system), how > do I know if it's used anywhere?
Your plain text log files will stop being written to. They'll just sit there, frozen in time, forever. Anything that reads them looking for new log entries will find none. Do you have any kind of automation that reads log files? Like, that thing whose name I cannot remember right now, that reads ssh's auth.log file looking for repeated failed logins, and updates your firewall rules.
