Skip site navigation (1)Skip section navigation (2)

  
 
  

home | help
LOGGER(1)			  User Commands 		       LOGGER(1)

NAME
     logger - enter messages into the system log

SYNOPSIS
     logger [options] message

DESCRIPTION
     logger makes entries in the system log.

     When the optional message argument is present, it is written to the log. If
     it is not present, and the -f option is not given either, then standard in-
     put is logged.

OPTIONS
     -d, --udp
	 Use  datagrams  (UDP)	only.  By default the connection is tried to the
	 syslog port defined in /etc/services, which is often 514.

	 See also --server and --socket to specify where to connect.

     -e, --skip-empty
	 Ignore empty lines when processing files. An empty line is  defined  to
	 be a line without any characters. Thus a line consisting only of white-
	 space	is NOT considered empty. Note that when the --prio-prefix option
	 is specified, the priority is not part of the line. Thus an empty  line
	 in this mode is a line that does not have any characters after the pri-
	 ority prefix (e.g., <13>).

     -f, --file file
	 Log  the contents of the specified file. This option cannot be combined
	 with a command-line message.

     -i
	 Log the PID of the logger process with each line.

     --id[=id]
	 Log the PID of the logger process with each line. When the optional ar-
	 gument id is specified, then it is used instead of the logger command's
	 PID. The use of --id=$$ (PPID) is recommended in scripts that send sev-
	 eral messages.

	 Note that the system logging infrastructure (for example  systemd  when
	 listening on /dev/log) may follow local socket credentials to overwrite
	 the PID specified in the message. logger(1) is able to set those socket
	 credentials  to the given id, but only if you have root permissions and
	 a process with the specified PID exists, otherwise the  socket  creden-
	 tials are not modified and the problem is silently ignored.

     --journald[=file]
	 Write	a  systemd journal entry. The entry is read from the given file,
	 when specified, otherwise from standard input.  Each  line  must  begin
	 with	a   field  that  is  accepted  by  journald;  see  systemd.jour-
	 nal-fields(7) for details. The use of a MESSAGE_ID field is generally a
	 good idea, as it makes finding entries easy. Examples:

		logger --journald <<end
		MESSAGE_ID=67feb6ffbaf24c5cbec13c008dd72309
		MESSAGE=The dogs bark, but the caravan goes on.
		DOGS=bark
		CARAVAN=goes on
		end

		logger --journald=entry.txt

	 Notice that --journald will ignore values of  other  options,	such  as
	 priority. If priority is needed it must be within input, and use PRIOR-
	 ITY  field.  The simple execution of journalctl(1) will display MESSAGE
	 field. Use journalctl --output json-pretty to see rest of the fields.

	 To include newlines in MESSAGE, specify MESSAGE several times. This  is
	 handled  as  a special case, other fields will be stored as an array in
	 the journal if they appear multiple times.

     --msgid msgid
	 Sets the RFC 5424 <https://tools.ietf.org/html/rfc5424> MSGID field.
	 Note that the space character is not permitted inside of msgid. This
	 option is only used if --rfc5424 is specified as well; otherwise, it is
	 silently ignored.

     -n, --server server
	 Write to the specified remote syslog server instead of to the system
	 log socket. Unless --udp or --tcp is specified, logger will first try
	 to use UDP, but if this fails a TCP connection is attempted.

     --no-act
	 Causes everything to be done except for writing the log message to the
	 system log, and removing the connection to the journal. This option can
	 be used together with --stderr for testing purposes.

     --octet-count
	 Use the RFC 6587 <https://tools.ietf.org/html/rfc6587> octet counting
	 framing method for sending messages. When this option is not used, the
	 default is no framing on UDP, and RFC6587 non-transparent framing (also
	 known as octet stuffing) on TCP.

     -P, --port port
	 Use the specified port. When this option is not specified, the port de-
	 faults to syslog for udp and to syslog-conn for tcp connections.

     -p, --priority priority
	 Enter the message into the log with the specified priority. The prior-
	 ity may be specified numerically or as a facility.level pair. For exam-
	 ple, -p local3.info logs the message as informational in the local3 fa-
	 cility. The default is user.notice.

     --prio-prefix
	 Look for a syslog prefix on every line read from standard input. This
	 prefix is a decimal number within angle brackets that encodes both the
	 facility and the level. The number is constructed by multiplying the
	 facility by 8 and then adding the level. For example, local0.info,
	 meaning facility=16 and level=6, becomes <134>.

	 If the prefix contains no facility, the facility defaults to what is
	 specified by the -p option. Similarly, if no prefix is provided, the
	 line is logged using the priority given with -p.

	 This option doesn't affect a command-line message.

     --rfc3164
	 Use the RFC 3164 <https://tools.ietf.org/html/rfc3164> BSD syslog pro-
	 tocol to submit messages to a remote server.

     --rfc5424[=without]
	 Use the RFC 5424 <https://tools.ietf.org/html/rfc5424> syslog protocol
	 to submit messages to a remote server. The optional without argument
	 can be a comma-separated list of the following values: notq, notime,
	 nohost.

	 The notq value suppresses the time-quality structured data from the
	 submitted message. The time-quality information shows whether the local
	 clock was synchronized plus the maximum number of microseconds the
	 timestamp might be off. The time quality is also automatically sup-
	 pressed when --sd-id timeQuality is specified.

	 The notime value (which implies notq) suppresses the complete sender
	 timestamp that is in ISO-8601 format, including microseconds and time-
	 zone.

	 The nohost value suppresses gethostname(2) information from the message
	 header.

	 The RFC 5424 protocol has been the default for logger since version
	 2.26.

     -s, --stderr
	 Output the message to standard error as well as to the system log.

     --sd-id name[@digits]
	 Specifies a structured data element ID for an RFC 5424 message header.
	 The option has to be used before --sd-param to introduce a new element.
	 The number of structured data elements is unlimited. The ID (name plus
	 possibly @digits) is case-sensitive and uniquely identifies the type
	 and purpose of the element. The same ID must not exist more than once
	 in a message. The @digits part is required for user-defined non-stan-
	 dardized IDs.

	 logger currently generates the timeQuality standardized element only.
	 RFC 5424 also describes the elements origin (with parameters ip, enter-
	 priseId, software and swVersion) and meta (with parameters sequenceId,
	 sysUpTime and language). These element IDs may be specified without the
	 @digits suffix.

     --sd-param name=value
	 Specifies a structured data element parameter, a name and value pair.
	 The option has to be used after --sd-id and may be specified more than
	 once for the same element. Note that the quotation marks around value
	 are required and must be escaped on the command line.

		 logger --rfc5424 --sd-id zoo@123	      \
				  --sd-param tiger="hungry"   \
				  --sd-param zebra="running"  \
				  --sd-id manager@123	      \
				  --sd-param onMeeting="yes"  \
				  "this is message"

	 produces:

	 <13>1 2015-10-01T14:07:59.168662+02:00 ws kzak - - [timeQuality tz-
	 Known="1" isSynced="1" syncAccuracy="218616"][zoo@123 tiger="hungry"
	 zebra="running"][manager@123 onMeeting="yes"] this is message

     -S, --size size
	 Sets the maximum permitted message size to size. The default is 1KiB
	 characters, which is the limit traditionally used and specified in RFC
	 3164. With RFC 5424, this limit has become flexible. A good assumption
	 is that RFC 5424 receivers can at least process 4KiB messages.

	 Most receivers accept messages larger than 1KiB over any type of syslog
	 protocol. As such, the --size option affects logger in all cases (not
	 only when --rfc5424 was used).

	 Note: the message-size limit limits the overall message size, including
	 the syslog header. Header sizes vary depending on the selected options
	 and the hostname length. As a rule of thumb, headers are usually not
	 longer than 50 to 80 characters. When selecting a maximum message size,
	 it is important to ensure that the receiver supports the max size as
	 well, otherwise messages may become truncated. Again, as a rule of
	 thumb two to four KiB message size should generally be OK, whereas any-
	 thing larger should be verified to work.

     --socket-errors mode
	 Print errors about Unix socket connections. The mode can be on, off, or
	 auto. When the mode is auto (the default), then logger will detect if
	 the init process is systemd(1), and if so, the assumption is made that
	 /dev/log can be used early at boot. The lack of /dev/log on other init
	 systems will not cause errors, just as when using the openlog(3) system
	 call. The logger(1) before version 2.26 used openlog(3), and thus was
	 unable to detect the loss of messages sent to Unix sockets.

	 When errors are not enabled, lost messages are not communicated and
	 will result in a successful exit status of logger(1).

     -T, --tcp
	 Use stream (TCP) only. By default the connection is tried to the sys-
	 log-conn port defined in /etc/services, which is often 601.

	 See also --server and --socket to specify where to connect.

     -t, --tag tag
	 Mark every line to be logged with the specified tag. The default tag is
	 the name of the user logged in on the terminal (or a user name based on
	 effective user ID).

     -u, --socket socket
	 Write to the specified socket instead of to the system log socket.

     --
	 End the argument list. This allows the message to start with a hyphen
	 (-).

     -h, --help
	 Display help text and exit.

     -V, --version
	 Display version and exit.

EXIT STATUS
     The logger utility exits 0 on success, and >0 if an error occurs.

FACILITIES AND LEVELS
     Valid facility names are:

     auth
     authpriv for security information of a sensitive nature
     cron

     daemon
     ftp
     kern cannot be generated from userspace process, automatically converted to
     user

     lpr
     mail
     news
     syslog
     user
     uucp
     local0
     to
     local7
     security deprecated synonym for auth

     Valid level names are:

     emerg
     alert
     crit
     err
     warning
     notice
     info
     debug
     panic deprecated synonym for emerg
     error deprecated synonym for err
     warn deprecated synonym for warning

     For the priority order and intended purposes of these facilities  and  lev-
     els, see syslog(3).

CONFORMING TO
     The  logger  command is expected to be IEEE Std 1003.2 ("POSIX.2") compati-
     ble.

EXAMPLES
	logger System rebooted

	logger -p local0.notice -t HOSTIDM -f /dev/idmc

	logger -n loghost.example.com System rebooted

AUTHORS
     The logger command was originally written by University  of  California  in
     1983-1993 and later rewritten by Karel Zak <kzak@redhat.com>, Rainer Ger-
     hards <rgerhards@adiscon.com>, and Sami Kerola <kerolasa@iki.fi>.

SEE ALSO
     journalctl(1), syslog(3), systemd.journal-fields(7)

REPORTING BUGS
     For	bug	  reports,	 use	   the	     issue	 tracker
     <https://github.com/util-linux/util-linux/issues>.

AVAILABILITY
     The logger command is part of the util-linux package  which  can  be  down-
     loaded	       from	       Linux		Kernel		 Archive
     <https://www.kernel.org/pub/linux/utils/util-linux/>.

util-linux 2.41.2		   2025-09-22			       LOGGER(1)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=logger&sektion=1&manpath=FreeBSD+Ports+15.1.quarterly>

home | help