syslog log config is false and in theory this causes syslog to be sent local (good as local syslog-ng will redirect to all the collectors).
daemon
false
172.28.152.67
1514
true
true
/usr/bob/log/confd_audit.log
true
I see the audit log does have the right content, but I don’t see anything going to the syslog locally. I realize I could configure remote syslog within the conf file, but prefer to forward to syslog as it already has configuration for all the syslog destinations, filtering, etc.
The comments seem to indicate this should work and it agrees with confd.conf manpage.