Proxmox PVE and PBS - "Syslog" export to Graylog or Syslog Server

[Askey307]

We're trying to add Proxmox to our Syslog server, however, seems like Syslog is not a thing anymore since Debian 12 and the adoption of journal. My question is, can you export Journald to Graylog or similar syslog servers without having to install "rsyslog" on the HA clusters?

We preferably do not want to mess around too much with features that's not already available in the base PVE.

Am I missing something?

 

[UdoB]

My question is, can you export Journald to Graylog or similar syslog servers

This depends on your definition of "similar". For me the answer is: yes.

Look into /etc/systemd/journal-upload.conf. I have only this line inserted:

# See journal-upload.conf(5) for details.      
[Upload]
URL=http://log.mylocaldomain.lan:19532

The receiving side is similar simple: /systemd/system/systemd-journal-remote.service

[Service]
ExecStart=/lib/systemd/systemd-journal-remote --listen-http=-3 --output=/var/log/journal/remote/

Disclaimer: this is from my mind, maybe I am missing a part...

Have fun!