4 ms·
afaik journald can just forward logs via rsyslog directly to a remote server Why would it need to store plaintext locally?
by akdev1l 1y ago
afaik journald can just forward logs via rsyslog directly to a remote server
Why would it need to store plaintext locally?
- mrweasel 1y agoDoesn't that still involve a conversion? I believe that rsyslog can read the journald database, but you're typically not querying syslog data directly, so there's a conversion between rsyslog and logstash, Splunk, Datalog, whatever.
- NewJazz 1y agoSome folks like having some local storage to act as a buffer in case the remote syslog server is down. Not sure if journald can do that on its own.