getting systemd action 9 suspended.
"Root cause: rsyslog was trying to use xconsole, a program not installed, to send some logs to."
seems to have vanished after installing xterm, though not clear why.
/etc/init.d/rsyslogd has code to create /dev/xconsole (which is supposedly the problem it's missing) by linking /run/xconsole to /dev/xconsole.
After installing xterm they are both still missing.
Note: this system is a server configured system with xfce4 xrdp and tightvnc installed to give remote access. Suggestion that xterm was missing is in other online hints.