systemctl status systemd-journald
vi /etc/systemd/journald.conf
: ForwardToSyslog=yes :
apt update apt install rsyslog
vi /etc/rsyslog.d/logserver.conf
log server IP:192.168.11.230 port:514 udp
*.* @192.168.11.230:514
systemctl enable rsyslog systemctl restart rsyslog
systemctl restart systemd-journald
logger "Test message to log server"