systemctl restart rsyslog appends older duplicate log entries (everything in the journal) to log files
Issue
-
Running
systemctl restart rsyslogappends all logs from the current boot to/var/log/messages. -
We have enabled persistent journaling (in
/var/log/journal) with systemd and each time we restartrsyslog.service, multiple days-worth of old messages get re-written to our log files.
Environment
- Red Hat Enterprise Linux 7
- systemd-journald
- rsyslog using imjournal
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
