Disable rsyslog duplication of systemd-journal

By default systemd-journal is non-persistent and rsyslog is configured
to copy everything from the journal to `/var/log/syslog`.

If you have a `/var/log/journal/` directory on persistent storage then
systemd-journal will automatically persist journal files but rsyslog
doesn't also automatically disable copying to syslog

rpm_spec/subpackages/manageiq-appliance

@@ -82,6 +82,10 @@ if systemctl is-active --quiet evm-failover-monitor; then
   systemctl restart evm-failover-monitor
 fi
 
+# Disable rsyslog duplicating systemd-journal output
+# This will comment out the multi-line module load from /etc/rsyslog.conf
+sed -i '/module(load="imjournal"/, /StateFile="imjournal.state")/ s|^|#|' %{_sysconfdir}/rsyslog.conf
+
 %files appliance
 %defattr(-,root,root,-)
 %{_sysconfdir}/httpd/conf.d/manageiq-*