# How to disable syslog output?

**URL:** <https://discuss.elastic.co/t/how-to-disable-syslog-output/58654>\
**Category:** Elasticsearch\
**Created:** [August 23, 2016, 8:16am UTC](https://discuss.elastic.co/t/how-to-disable-syslog-output/58654 "2016-08-23T08:16:53Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jeremy\_Lecour](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jeremy_lecour/32/1416_2.png) [@Jeremy\_Lecour](https://discuss.elastic.co/u/Jeremy_Lecour)\
**Post date:** [August 23, 2016, 8:16am UTC](https://discuss.elastic.co/t/how-to-disable-syslog-output/58654/1 "2016-08-23T08:16:54Z")

</div>

Hi,

I'm sorry if the answer is obvious. I thought it would be, but didn't find it, so I'm asking 😕

I've noticed that a brand new Elasticsearch install (2.3 on Debian 8) is logging to syslog (as well as its regular own log file).

Is there a way to disable that ?

Thanks

---

<div class="post-metadata">

**Author:** ![abeyad](https://avatars.discourse-cdn.com/v4/letter/a/278dde/32.png) [@abeyad](https://discuss.elastic.co/u/abeyad)\
**Post date:** [August 23, 2016, 8:50pm UTC](https://discuss.elastic.co/t/how-to-disable-syslog-output/58654/2 "2016-08-23T20:50:50Z")

</div>

Hello,

ES does not log to syslog... do you have any forwarding set up that would forward logs to syslog?

---

<div class="post-metadata">

**Author:** ![Jeremy\_Lecour](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jeremy_lecour/32/1416_2.png) [@Jeremy\_Lecour](https://discuss.elastic.co/u/Jeremy_Lecour)\
**Post date:** [August 24, 2016, 9:05am UTC](https://discuss.elastic.co/t/how-to-disable-syslog-output/58654/3 "2016-08-24T09:05:55Z")

</div>

I don't think I have something setup, but the messages are definitely showing up in /var/log/daemon.log as well as in ES own logs.

Since ES is managed by SystemD, is there an "stdout" output for Elasticsearch that journald might intercept en forward to syslog ?

---

<div class="post-metadata">

**Author:** ![abeyad](https://avatars.discourse-cdn.com/v4/letter/a/278dde/32.png) [@abeyad](https://discuss.elastic.co/u/abeyad)\
**Post date:** [August 24, 2016, 2:15pm UTC](https://discuss.elastic.co/t/how-to-disable-syslog-output/58654/4 "2016-08-24T14:15:11Z")

</div>

If journald is forwarding console output to syslog, you will want to change  
your logging settings in `config/logging.yml` so the root logger isn't  
writing to the console. If you startup ES out of the box without changing  
settings, you will notice ES sends all the stuff it logs to  
elasticsearch.log to standard out as well. You can change the behavior  
there via the `config/logging.yml`

---

<div class="post-metadata">

**Author:** ![Jeremy\_Lecour](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jeremy_lecour/32/1416_2.png) [@Jeremy\_Lecour](https://discuss.elastic.co/u/Jeremy_Lecour)\
**Post date:** [August 30, 2016, 6:07am UTC](https://discuss.elastic.co/t/how-to-disable-syslog-output/58654/5 "2016-08-30T06:07:56Z")

</div>

I've created an [issue](https://github.com/elastic/elasticsearch/issues/20212) since logging to stdout is an anti-pattern for daemons.

Thanks for the help.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 10:24pm UTC](https://discuss.elastic.co/t/how-to-disable-syslog-output/58654/6 "2017-07-05T22:24:14Z")

</div>