Re: Logging of firewalld

On 05.06.2024 20:22, Andreas Croci wrote:

Hello, I'm using openSUSE Leap and Tumbleweed, which both come with firewalld enabled. I wanted to see who is trying to access my computers and enabled the logs, but it writes to the normal journal and floods the entries there with an awful lot of messages that make the thing unreadable. I didn't find a way to specify a different file to log the dropped packets to, other than enabling rsyslog. Is there a way to keep using journald and still have the firewall log in a separate file?

man firewalld

--log-target=file --log-file=...