Re: The impact of removing rsyslog from Trixie
On Mon, Feb 17, 2025 at 21:41:33 +0100, jman wrote:
> If I wanted to remove rsyslog (because I want just one logging system), how
> do I know if it's used anywhere?
Your plain text log files will stop being written to. They'll just sit
there, frozen in time, forever. Anything that reads them looking for new
log entries will find none.
Do you have any kind of automation that reads log files? Like, that
thing whose name I cannot remember right now, that reads ssh's auth.log
file looking for repeated failed logins, and updates your firewall rules.
Reply to: