To give a few more examples: With syslog-ng reading journal/socket: - No logging for cron daemon (fcron) - No logging at all in log/auth.log - Only some few kernel messages in log/everything.log - No logging with logger(1) The list goes on ...