Ensure only one logging system is in use

# Check journald is running (required)
if ! systemctl is-active systemd-journald >/dev/null 2>&1; then
  echo "FAIL: systemd-journald is not active"
  exit 1
fi

# Check if rsyslog is in use
rsyslog_active=false
systemctl is-active rsyslog >/dev/null 2>&1 && rsyslog_active=true

# If rsyslog is active, ensure journald forwards to it
if $rsyslog_active; then
  forward=$(systemd-analyze cat-config systemd/journald.conf 2>/dev/null | grep -E '^ForwardToSyslog=' | tail -1 | cut -d= -f2)
  if [ "$forward" = "yes" ]; then
    echo "OK: journald + rsyslog (with forwarding)"
    exit 0
  fi
  echo "INFO: journald + rsyslog (forwarding not configured)"
  exit 0
fi

echo "OK: journald-only logging"
exit 0

expected_exit:

0

note:

Ensure systemd-journald is active. If using rsyslog, configure ForwardToSyslog=yes