Hi all. I have Cribl replacing syslog-ng, but in order to listen on 514 I needed to run it as root. Is there a work-around to drop privileges or switch to user cribl after start-up?
Copying the answer I received from Kyle on Slack:
Systemd can handle this, see https://docs.cribl.io/stream/deploy-single-instance/#systemd-boot