journald does not have the ability to send over the network to a syslog server.
when you configure journald to send to a syslog daemon, journald throws away a lot of details that it knows. The other option is to use imjournal in rsyslog to fetch the logs from journald
David Lang On Tue, 12 Mar 2024, Alberto via rsyslog wrote:
Hi, I'm trying to send logs from a Workstation with Journald to my Rsyslog server. All references point to change "ForwardToSyslog=yes" in "/etc/systemd/journald.conf" (I don't know why I cannot find the "/run/systemd/journal/syslog" socket never) and Rsyslog getting from socket but in LOCALHOST. Can I send to REMOTE Rsyslog without install an local Rsyslog in Workstation? Best Regards, Alberto _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
_______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.