2016-01-27 23:37 GMT+01:00 Peter Portante <[email protected]>: >> As I can't look into the future, I'm just talking about the status-quo >> in Debian: >> We do install rsyslog by default in our current stable release >> (Jessie, aka 8.0) and that's still the case for testing/unstable. >> journald is setup to forward messages to rsyslog (aka. push model) > > > We use imjournal in fedora, rhel, centos, with systemd listening for logs > on /dev/log and then rsyslog pulling them.
imjournal only works halfway decently if you have a persistent journal. As I mentioned, we don't use persistent journal in Debian (for one, to avoid writing log messages to disk twice). imjournal did also have quite some serious bugs in the past (like getting stuck in a loop generating a flood of log messages filling up the disk). So I'm not yet comfortable enabling that. Especially since there is no official *upstream* support for imjournal. I also wonder, what the performance overhead is for imjournal. I suspect that the throughput using ForwardToSyslog=yes is higher. If anyone has benchmarks for that, I'd appreciate that. Michael -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth? _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
