who is responsible that nothing is forwarded to the traditional syslog?
systemd or rsyslog?
/var/lib/rsyslog/imjournal.state exists and get re-created when it is
deleted
______________________________________________
imjournal is configured
$ModLoad imjournal
$MainMsgQueueSize 100000
$WorkDirectory /var/lib/rsyslog
$IMJournalStateFile imjournal.state
______________________________________________
[root@rawhide ~]# cat /var/lib/rsyslog/imjournal.state
s=fd7c18c2f779473fa1b001f7c110f006;i=3b0;b=d7cb147743824c819a33714632f29e16;m=112d9776;t=523e0539c0a26;x=3ff5b07833c8f9c
[root@rawhide ~]# rpm -q rsyslog
rsyslog-8.12.0-2.fc24.x86_64
[root@rawhide ~]# rpm -qa | grep systemd
systemd-227-3.fc24.x86_64
systemd-libs-227-3.fc24.x86_64