Remove imjournal plugin when only forwarding. On our Debian hosts,

journald automatically forwards to rsyslog. With the imjournal plugin present log entries would be duplicated in the logs
OpenConext · May 29, 2024 · 843c197 · 843c197
1 parent a54fce0
commit 843c197
Showing 1 changed file with 0 additions and 5 deletions.
diff --git a/roles/rsyslog/templates/rsyslog_onlyforward.conf.j2 b/roles/rsyslog/templates/rsyslog_onlyforward.conf.j2
@@ -2,11 +2,6 @@
 module(load="imuxsock") 
 module(load="imklog")   # provides kernel logging support
 module(load="immark" interval="600" )  # provides --MARK-- message capability
-module(load="imjournal" 
-       PersistStateInterval="100"
-       StateFile="/var/spool/rsyslog/imjournal.state"
-       ratelimit.interval="30"
-       ratelimit.burst="20000" ) # Reads journald logs 
 
 $PreserveFQDN on