# Rubydebug logs get sent to /var/log/syslog rather than the default log path (/var/log/logstash/)

**URL:** <https://discuss.elastic.co/t/rubydebug-logs-get-sent-to-var-log-syslog-rather-than-the-default-log-path-var-log-logstash/79631>\
**Category:** Logstash\
**Created:** [March 22, 2017, 5:52pm UTC](https://discuss.elastic.co/t/rubydebug-logs-get-sent-to-var-log-syslog-rather-than-the-default-log-path-var-log-logstash/79631 "2017-03-22T17:52:25Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![dfinn](https://avatars.discourse-cdn.com/v4/letter/d/8c91f0/32.png) [@dfinn](https://discuss.elastic.co/u/dfinn)\
**Post date:** [March 22, 2017, 5:52pm UTC](https://discuss.elastic.co/t/rubydebug-logs-get-sent-to-var-log-syslog-rather-than-the-default-log-path-var-log-logstash/79631/1 "2017-03-22T17:52:25Z")

</div>

Logstash 5.2.2-1 installed from Elastic repos on Ubuntu 16

While troubleshooting an issue earlier I enabled rubydebug output like so:

```
output {
  elasticsearch {
    hosts => "localhost:9200"
  }
  stdout { codec => rubydebug }
}

```

I was expecting this to write to a log under /var/log/logstash where all the rest of my logstash logs are going. Nothing showed up though. I started to think that maybe rubydebug wasn't working as expected but then I checked /var/log/syslog and saw that it was writing to that log.

It seems as if enabling rubydebug has caused these logs to get written to syslog rather than using the default log path where everything else goes. Am I doing something wrong here or is this a bug that should be reported?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 19, 2017, 5:52pm UTC](https://discuss.elastic.co/t/rubydebug-logs-get-sent-to-var-log-syslog-rather-than-the-default-log-path-var-log-logstash/79631/2 "2017-04-19T17:52:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.