[arch-general] Replacing journal completely with syslog-ng

[Jan Alexander Steffens]

On Sun, Oct 27, 2013 at 5:41 PM, Dimitris Zervas <dzervas at dzervas.gr> wrote:
> I have to say that I really hate journalctl.
> But apart from that, I need syslog.
> Journalctl requires too much resources (I have a 512MB KVM) and some times
> it kicks the server out of memory.
> Also, there is nearly no way to parse its logs with any log analyzers, you
> have to do it the hackish way with "journalctl -o export" which is very
> heavyweight and requires a whole shell process to do so.
> I just want to completely disable journalctl and use syslog-ng like the
> good old days.
> Any help on how to do that?
> I did my h/w (googled it) but I got no helpful results...
> Any help appreciated! :)

Simply install and enable syslog-ng. Then set Storage=none in
/etc/systemd/journald.conf. Reboot afterwards.

Journald will forward messages to syslog, without storing anything
itself anymore.