journalctl dhcpd log import?

[splunkjosef]

My linux-based DHCP server running ISC DHCPD is running systemd and puts the dhcpd logs into the central logging system without creating a distinct dhcpd.log file. Instead I have to look at the logs with this command:

journalctl -u isc-dhcp-server

So I can no longer simply point my UF to the old dhcpd.log file for import into Splunk. How can I get these logs into Splunk?

[bguilfoyle_splu]

Perhaps try this as a scripted input.
Create an executable bash script with the command exec journalctl --since=now -f -u isc-dhcp-server
Add the script as an input on the forwarder:
$SPLUNK_HOME/bin/splunk add exec \
-source $SPLUNK_HOME/bin/scripts/myScriptName.sh \
-interval = 0