Simon McVittie <s...@debian.org> writes: > I know fail2ban and logcheck do read plain-text logs (although as > mentioned, fail2ban already has native Journal-reading support too), and > I would guess that fwlogwatch, snort and xwatch probably also read the > logs.
logcheck also has native journal-reading support. Note that its dependency is only Suggests. I have not checked if that's there for some other reason. -- Russ Allbery (r...@debian.org) <https://www.eyrie.org/~eagle/>