<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On 15 Aug 2019, at 17:48, Daniel J. Luke <<a href="mailto:dluke@geeklair.net" class="">dluke@geeklair.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">High Sierra switched the way syslog works on Mac OS (see<span class="Apple-converted-space"> </span></span><a href="https://developer.apple.com/documentation/os/logging" style="font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://developer.apple.com/documentation/os/logging</a><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">). This replaced the ASL (and syslog) stuff.</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""></div></blockquote><div><br class=""></div><div>I first thought: that can’t be right, can it? ASL is still there, /etc/asl and /etc/.asl.conf is still there. Man pages are still there. <i class="">syslogd</i> runs in the background. Console and log work against the ASL infrastructure. asl.conf contains all this information (as described in the man page for asl.conf).</div><div><br class=""></div><div>A command like <i class="">logger</i> still works (produces syslog messages).</div><div><br class=""></div><div>But then I found <a href="https://eclecticlight.co/2018/03/19/macos-unified-log-1-why-what-and-how/" class="">https://eclecticlight.co/2018/03/19/macos-unified-log-1-why-what-and-how/</a></div><div><br class=""></div><div>Now, that says that syslog messages also end up in Unified Logging. What it doesn’t say how for instance old style messages for facility <i class="">mail</i> with level <i class="">notice</i> end up there. Or with facility <i class="">daemon</i> with level <i class="">info</i>. So, how to get these out is still a riddle.</div><div><br class=""></div><div>I have found a GUI app: <a href="https://eclecticlight.co/consolation-t2m2-and-log-utilities/" class="">https://eclecticlight.co/consolation-t2m2-and-log-utilities/</a></div><div><br class=""></div><div>So, I’m going to try that.</div><div><br class=""></div><div>Or I’m going to live with the fact that unbound and nsd write logs in the chroot-ed /opt/local/etc/{nsd,unbound} and figure out how to get log rotation working for these while unbound and nsd keep running.</div><div><br class=""></div><div>Why did Apple leave all the ASL stuff in place if it isn’t functional anymore? It’s still there in Mojave. Why did they not offer a decent compatibility? Afraid people would not move to OS-specific log commands? Sigh.</div><div><br class=""></div><div>G</div><br class=""><blockquote type="cite" class=""><div class=""><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">you can use the 'log' command line utility to view the logs.</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">[I am not a fan of the way this stuff works now]</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><blockquote type="cite" style="font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">On Aug 15, 2019, at 3:46 AM, Gerben Wierda <<a href="mailto:gerben.wierda@rna.nl" class="">gerben.wierda@rna.nl</a>> wrote:<br class=""><br class="">I’m running unbound. If I use file logging, it neatly ends up in the file I want. If I set syslog in the conf file (this is standard in macports unbound by the way) I get nothing. Logging disappears into a black hole, probably the same black hole where mail logging from postfix disappears in on High Sierra Server.<br class=""><br class=""> use-syslog: <yes or no><br class=""> Sets unbound to send log messages to the syslogd, using sys-<br class=""> log(3). The log facility LOG_DAEMON is used, with identity<br class=""> "unbound". The logfile setting is overridden when use-syslog is<br class=""> turned on. The default is to log to syslog.<br class=""><br class="">How do I make sure that I get to see the syslog messages. Probably by adapting /etc/asl.conf and /etc/syslog.conf? Or is it a matter of ASL hiding these kinds of messages from ordinary users? Is there a way to tell asl/syslog to put the logging output of unbound into a (log rotated) file in e.g. /var/log?<br class=""><br class="">PS. Apple is apparently playing around with unbound too:<br class=""><br class="">luna:~ gerben$ ls -l /usr/share/man/man8/unbound.8<span class="Apple-converted-space"> </span><br class="">-rw-r--r-- 1 root wheel 2342 Aug 23 2018 /usr/share/man/man8/unbound.8<br class=""></blockquote><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">--<span class="Apple-converted-space"> </span></span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Daniel J. Luke</span></div></blockquote></div><br class=""></body></html>