<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><font face="Arial">/etc/rsyslog.conf has many settings including
the following:<br>
</font></p>
<p><font face="Arial">mail.*
/var/log/maillog</font></p>
<p><font face="Arial">It also has this:</font></p>
<p><font face="Arial"># Include all config files in /etc/rsyslog.d/<br>
$IncludeConfig /etc/rsyslog.d/*.conf<br>
</font></p>
<p><font face="Arial"><br>
</font></p>
<p><font face="Arial">/etc/rsyslog.d/listen.conf <br>
</font></p>
<p><font face="Arial">contains only one line:</font></p>
<p><font face="Arial">SystemLogSocketName
/run/systemd/journal/syslog<br>
</font><br>
</p>
<br>
<div class="moz-cite-prefix">On 12/14/2016 6:54 PM, Mark Sapiro
wrote:<br>
</div>
<blockquote
cite="mid:af73c86a-0f1f-1be2-1178-23da38f70e03@msapiro.net"
type="cite">
<pre wrap="">Did you look at the contents of <i class="moz-txt-slash"><span class="moz-txt-tag">/</span>etc/rsyslog.conf and /etc/rsyslog.d<span class="moz-txt-tag">/</span></i>
listen.conf and any other files that might be included from either of those?</pre>
</blockquote>
<br>
</body>
</html>