Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

On Ubuntu 10.04 LTS, I'm using the stock rsyslog configuration and added a custom file in /etc/rsyslog.d with the following contents:

# cat /etc/rsyslog.d/62-pc 
local3.debug    /var/log/pc/debug.log
local3.*    /var/log/pc/main.log

The two referenced files exist and the files and containing directory are readable and writable by the syslog user. Yet, the only place I find the messages is /var/log/syslog. /var/log/pc/main.log is empty.

In addition, the messages in /var/log/syslog.

I've checked that the program from which the messages originate is not the cause of these troubles: the problem also occurs with the logger command.

What can be wrong here?

share|improve this question
up vote 2 down vote accepted

Does your rsylog config have a statement to include/process this directory?

$IncludeConfig /etc/rsyslog.d/

Or the specific file you wish;

$IncludeConfig /etc/rsyslog.d/62-pc

Under Red Hat, Rsyslog defaults to including just files ending in .conf. You may need to edit this line under Ubuntu as well. If your line looks like this, it won't include a file named 62-pc.

$IncludeConfig /etc/rsyslog.d/*.conf
share|improve this answer
You earned your bounty! Thanks a lot. edit: it will have to wait 24 hours – jd. Jan 8 '13 at 22:06

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.