# How to send Elasticsearch 6.8 logs to syslog?

**URL:** <https://discuss.elastic.co/t/how-to-send-elasticsearch-6-8-logs-to-syslog/273621>\
**Category:** Elasticsearch\
**Created:** [May 21, 2021, 6:38am UTC](https://discuss.elastic.co/t/how-to-send-elasticsearch-6-8-logs-to-syslog/273621 "2021-05-21T06:38:58Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![sviscapi](https://avatars.discourse-cdn.com/v4/letter/s/c68b51/32.png) [@sviscapi](https://discuss.elastic.co/u/sviscapi)\
**Post date:** [May 21, 2021, 6:38am UTC](https://discuss.elastic.co/t/how-to-send-elasticsearch-6-8-logs-to-syslog/273621/1 "2021-05-21T06:38:58Z")

</div>

Dear all,

First post on these boards 🙂

I've been tasked to configure some Elasticsearch 6.8 server to send its logs to syslog. Based on the official documentation, I came up with the following in /etc/elasticsearch/log4j2.properties:

> **[Logging configuration | Elasticsearch Guide \[6.8\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/6.8/logging.html)**

[https://logging.apache.org/log4j/2.x/manual/appenders.html#SyslogAppender](https://logging.apache.org/log4j/2.x/manual/appenders.html#SyslogAppender)

```
appender.syslog.type = Syslog
appender.syslog.name = SYSLOG
appender.syslog.facility = LOCAL5
appender.syslog.host = localhost
appender.syslog.port = 514
appender.syslog.protocol = UDP
appender.syslog.layout.type = PatternLayout
appender.syslog.layout.pattern = "local5: %d{yyyy.MM.dd HH:mm:ss} %-5p [%c] %m%n"

```

How does that look ?

Best regards,

Samuel

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 18, 2021, 6:39am UTC](https://discuss.elastic.co/t/how-to-send-elasticsearch-6-8-logs-to-syslog/273621/2 "2021-06-18T06:39:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.