syslog 101

[Tom H]

On Sun, Jun 11, 2017 at 2:25 PM, thufir <hawat.thufir at gmail.com> wrote:
> On Sat, 10 Jun 2017 14:30:18 -0400, Tom H wrote:
>>
>> The format of "/etc/rsyslog.conf" and "/etc/rsyslog.conf.d/*" is similar
>> to legacy syslog.conf on Linux and syslog.conf on Solaris,
>> FreeBSD, and NetBSD (and perhaps others but these are what I know), with
>> some rsyslog-specific options. Whereas, from what I've seen on mailing
>> list support requests, syslog-ng.conf has a completely different format.
>
> thanks dude.

You're welcome.

One more thing. When using modules, try to use the new syntax rather
than the legacy one:

new:
module(load="imuxsock" SysSock.Name="/run/systemd/journal/syslog")

new alt:
module(load="imuxsock")
input(type="imuxsock" Socket="/run/systemd/journal/syslog")
[which allows you to add as many "input" lines as you need, loading
the module once]

legacy:
$ModLoad imuxsock
$SystemLogSocketName /run/systemd/journal/syslog