Hello everyone
I'm running a small logging LXC with Debian 11, which also is able to get remote logging from my pfSense. After the upgrade from Debian 11 to Debian 12, the logs filled my LXC almost entirely. After some investigation I found that the module "module(load="imklog")" within my /etc/rsyslog.conf was a problem, so I commentet that one since I'm running the container unprivileged. Now it seems that since Debian 12, they moved away from syslog to journaltcl, which is okay I guess... Now how do I handle that exactly? Just removing rsyslog and installing journaltcl? How am I able to receive logs from a remote host again? Or what is the best advise to handle my situation?
Best Regards
I'm running a small logging LXC with Debian 11, which also is able to get remote logging from my pfSense. After the upgrade from Debian 11 to Debian 12, the logs filled my LXC almost entirely. After some investigation I found that the module "module(load="imklog")" within my /etc/rsyslog.conf was a problem, so I commentet that one since I'm running the container unprivileged. Now it seems that since Debian 12, they moved away from syslog to journaltcl, which is okay I guess... Now how do I handle that exactly? Just removing rsyslog and installing journaltcl? How am I able to receive logs from a remote host again? Or what is the best advise to handle my situation?
Best Regards