syslog-ng with logsurfer versus rsyslog with logcheck for real-time alert throttling on Artix OpenRC
Goal: configure low-noise syslog alerting on an Artix Linux OpenRC installation without relying on systemd-journald, while suppressing repeated messages and delivering real-time alerts. Constraint: Artix is systemd-free by default, so journalctl-based alerting is not the assumed path. syslog-ng with logsurfer provides stateful pattern matching and throttling