[SOLVED] Debian: switching back to /var/log/messages instead of journalctrl

RudyMartin · 12-23-2023, 08:32 AM

at work, we recently upgraded some virtual machines running debian to the lastest version and I found that the old /var/log/messages are no longer updated and I have scripts and processes which rely of the messages files.

How do I go back to have all the files separated as it was before? I did some google searchers but all the posts I have found talk about using journalctrl -- which is NOT what I want, and I prefer the Slackware way of having just one file for a single purpose.

hazel · 12-23-2023, 09:36 AM

Journal has a socket that rsyslog can read from so you can run them in parallel:
https://access.redhat.com/documentat...og_and_journal

thinknix · 12-24-2023, 10:58 AM

Yep, journalctl and rsyslog can indeed run in parallel. 'sudo apt install rsyslog' is all you need, that will dump most logs into /var/log/syslog. If you prefer /var/log/messages, just change the log file name in /etc/rsyslog.conf.

pan64 · 12-24-2023, 11:05 AM

(but why?) What's wrong with journalctl?

syg00 · 12-24-2023, 08:19 PM

When you get all that sorted out, might consider converting the journal to transient to save the disk space.