3 ms·

So this means any logging/auditing software that requires the data to be sourced from syslog is unreliable. This kind of behavior would make an auditor's head s

by feld 12y ago

So this means any logging/auditing software that requires the data to be sourced from syslog is unreliable. This kind of behavior would make an auditor's head spin.

richardwhiuk 12y ago
If you are auditing systems based on systemd (or sysvinit or makefiles or upstart or launchd) then you are probably doing it wrong anyway
- unethical_ban 12y ago
  If you build a custom logger into a startup/scheduler instead of using the existing logging component, you're doing it wrong. Really, if you're not using the logging mechanism to check a system, what are you using?