// , Send SystemD Logs to a separate file

[v6]

// , Currently both Vault and Consul logs are going into /var/log/messages, but for easier external consumption, either by the ELK stack or by Splunk, it would be more convenient if they had separate vault.log and consul.log files.

[v6]

// , @mrodriguezio, would you please have a go at this one?

[v6]

// , Something like this might work:

ExecStart=/bin/bash -c '/usr/bin/journalctl --no-tail -f -o json > /var/journald_file'

Splunk and others can't handle the binary format of SystemD journals:

https://www.freedesktop.org/wiki/Software/systemd/journal-files/