Beginning with vRealize Log Insight 4.6, agents can read logs from the journald system service for log data in Linux distributions running systemd. journald is now the default standard for logging in systemd-based Linux platforms. The journald configuration section supports the following options:
- journal_files
-
The journal files to monitor. The following values are supported:
Value Description all Open and monitor all the available journal files. local Monitor and read only the journal files generated on the local machine. runtime Monitor and read only the volatile journal files, excluding the files in the persistent storage. system Monitor and read only the system services and kernel journal files. user Monitor and read only journal files of the current user. - fetch_fields
-
The fields to fetch with the message from the journal log entries. The value for this option is a case-insensitive list of field names separated by comma. The following values are supported:
Value Description pri_severity,pri_facility,syslog_identifier Default value for this option. * Fetch all the fields. all Do not fetch any fields.
