On Wed, 6 Nov 2019, Rainer Gerhards via rsyslog wrote:
Actually the best way is to remove journal at all from the picture and let rsyslog process the system log socket directly. But this probably is off to today's policy choices.
how can you do this? I have been told it's possible but have not been able to find a way to do so.
David Lang _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

