Home / server / Questions / 1083309
In Process
gcb
Asked: 2021-11-12 14:41:25 +0800 CST

systemd, journal receiving raw log

  • 772

one common paradigm on all other syslog implementations (rsyslog, syslog-ng, readlog, etc) is to exchange log entries via UDP514 in plain text format.

How do I enable systemd-journal-remote to receive logs in such format?

(I know there are plugins to more complex log providers to emulate the new https format used by default by systemd-journal-remote, but i'm dealing with dumb appliances that can only send the old, original, plain text format)

syslog systemd journald

1 Answers

  1. ended up using rsyslog with the omjournal output log. This way the logs go to journald and are "unified" in the syslog ecosystem. Have the advantage of working across containers too.

    # /etc/rsyslog.conf
...
module(load="omjournal")
template(name="journal" type="list") {
  constant(value="remote" outname="MESSAGE")
  property(name="$!event-type" outname="EVENT_TYPE")
}
action(type="omjournal" template="journal")
...
    • 0