ConfigServer Community Forum

Posted: **04 Nov 2022, 12:24**

Most new operating systems are switching to journald instead of syslog for logging as it provides a much needed unified interface for logging. It would be good if CSF could support this similar to fail2ban.

fail2ban:
https://unix.stackexchange.com/question ... md-journal

A good tutorial on using journalctl:
https://www.2daygeek.com/journalctl-rea ... stem-logs/

Posted: **08 Nov 2022, 07:36**

You should note that you wouldn't even have to change any regex as you can use the "short" output to match syslog:

Example:

View postfix logs:

journalctl --no-pager --quiet --unit='postfix' --since='2022-10-30 00:00:00' --until='2022-11-06 23:59:59' --output='short'

If you only want to view posfix smtp logs:

journalctl --no-pager --quiet --identifier='postfix/smtp' --since='2022-10-30 00:00:00' --until='2022-11-06 23:59:59' --output='short'

Add journald support