Amazon linux 2023 log issue

Elastic Stack Elasticsearch
1

I have two agents that are Amazon linux 2023.
since AL2023 stopped traditional logging and uses journald for a centralized logging, their logs are not being populated into siem.
what is a better option?
to install rsyslog or to collect logs from journal?

2

What are you using to collect the logs?

If you are using Elastic Agent, there is the journald integration and if you are using pure filebeat there is the journald input.