From 529550f59432165d9ad4e1d8d4f9b9cc7917f4f0 Mon Sep 17 00:00:00 2001 From: Jeltz Date: Tue, 2 Mar 2021 00:46:16 +0100 Subject: [PATCH] Don't use 'imjournal' ('imuxsock' is already used) I still don't understand why it increased the size of the firewall logs by a factor of 5 to 10, but we don't really need structured logs from systemd-journald and the author seems to discourage it's use, so I will not investigate further. --- roles/rsyslog_common/templates/10-common.conf.j2 | 3 --- 1 file changed, 3 deletions(-) diff --git a/roles/rsyslog_common/templates/10-common.conf.j2 b/roles/rsyslog_common/templates/10-common.conf.j2 index c5e6449..ffc48de 100644 --- a/roles/rsyslog_common/templates/10-common.conf.j2 +++ b/roles/rsyslog_common/templates/10-common.conf.j2 @@ -19,9 +19,6 @@ module(load="imuxsock") # Collect kernel logs module(load="imklog") -# Collect systemd-journald logs -module(load="imjournal" ratelimit.interval="0" ratelimit.burst="0") - # Parse CEE logs module(load="mmjsonparse")