On Tue, 16 Mar 2021 at 03:09, Robert Edmonds <edmonds(a)debian.org> wrote:
> If I'm reading the knot source code
correctly [0,1], knotd
> unconditionally logs to the system journal interface if knotd has been
> compiled with systemd support and the system is running with systemd as
> PID 1. So, a better question might be why knot is using syslog at all on
> one of your hosts.
Thanks for the links and for clarifying the source code.
That led me to find that the two systems are running different syslog
daemons. It turns out the Debian package for rsyslogd creates the
socket /run/systemd/journal/syslog, which journald writes to, and the
Debian package for syslog-ng does not.
Inconsistency explained. Thanks!