How do I configure SSSD to send logs to syslog? I would like to include the SSSD debug logs as well. We would like to feed the sssd logs to Splunk. Our systems are already configured to send syslog to Splunk Security Module. So we would like to use that setup, instead of the Splunk Forwarder.
Depending on which distro you are using, your syslog daemon is likely rsyslog or syslog-ng. Both can be configured to watch specific files and pull in log events for futher processing (for example forwarding to Splunk)