<div dir="ltr">Thanks Tired that.<div>I don't see service start fail messages. However, even with the latest date, syslog doesn't show any logs from my applications. However, journalctl is showing the logs after a latest date update.</div><div><br></div><div>source s_src { unix-dgram("/dev/log"); internal();<br>             file("/proc/kmsg" program_override("kernel"));<br>};<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Feb 6, 2020 at 12:21 PM Nagy Gábor <<a href="mailto:gabor.hl@gmail.com">gabor.hl@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="auto"><div dir="auto">I think you need to add /dev/log to unix-dgram.</div><div dir="auto"><br></div><div dir="auto">source s_src { unix-dgram("/dev/log"); </div><div dir="auto">internal();<br></div><span style="color:rgb(80,0,80)"><div>             file("/proc/kmsg" program_override("kernel"));<br>};</div><div><br style="font-family:sans-serif"></div><div dir="auto">Regards,</div><div dir="auto">Gábor</div></span><div class="gmail_quote" dir="auto"><div dir="ltr" class="gmail_attr"><br></div></div></div>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div>