[systemd-devel] rsyslog / journald - el7 vs el8

[Ricardo Esteves]

Hi,

On RHEL7 (and clones) systemd package included /etc/rsyslog.d/listen.conf:
$SystemLogSocketName /run/systemd/journal/syslog

which makes rsyslog get the logs from journald.

On RHEL8 (and clones) this file is not included anymore. Does anyone 
knows why?

I see that on EL8 rsyslog.conf now includes the module imjournal to get 
the logs directly from journald db.

Though on rsyslog documentation says its not recommended because is 
quite heavy.

What would be the correct way (less heavy) to get logs from journald 
into rsyslog on EL8?


Best regards,
Ricardo Esteves.