Hello all
no all us servers running on systemd so we would like to use journald also for remotelogging. And yes we have configured that and it is running fine. We have configured the first 3 servers to send logs to central journaldservice with https and certificate. So on the server it is easy to say:
journalctl --file remote-2001:470:1f0c:568:201:8eff:ff28:d16e.journal -f
But with a lot of IP's this is not very handy.
So we searching vor a GUI/Interface. The only one program that we found that journald is supported is ksystemlog. There i can enter remoteconnection. But i can't set some auth there. How the program connect? If i do the connection the programm say connected, but the logs in the program are emty.
I think that can't be so easy to connect, because that would be an security issue. So how i must conncect to the remote journald Server?
Here are the serverconfigs:
cat /etc/systemd/journal-remote.conf
[Remote]
# Seal=false
# SplitMode=host
ServerKeyFile=/etc/ssl/private-journal-remote/journal-remote.pem
ServerCertificateFile=/etc/ssl/certs/journal-remote.pem
TrustedCertificateFile=/etc/ssl/ca/trusted.pem
cat /etc/systemd/system/systemd-journal-remote.service
# This file is part of systemd.
#
# systemd is free software; you can redistribute it and/or modify it
# under the terms of the GNU Lesser General Public License as published by
# the Free Software Foundation; either version 2.1 of the License, or
# (at your option) any later version.
[Unit]
Description=Journal Remote Sink Service
Documentation=man:systemd-journal-remote(8) man:journal-remote.conf(5)
Requires=systemd-journal-remote.socket
[Service]
ExecStart=/lib/systemd/systemd-journal-remote \
--listen-https=-3 \
--output=/var/log/journal/remote/
User=systemd-journal-remote
Group=systemd-journal-remote
PrivateTmp=yes
PrivateDevices=yes
PrivateNetwork=yes
WatchdogSec=3min
Thanks a lot!
Using here Ubuntu 18.04 LTS