Believe some changes (e.g., /etc/rsyslog.conf, /sbin/rsyslogd,...) are in order? [root at localhost ~]# ps agxZ | grep syslog system_u:system_r:initrc_t 2511 ? Ssl 0:00 rsyslogd -m 0 system_u:system_r:unconfined_t 4154 pts/0 S+ 0:00 grep syslog [root at localhost ~]# tom -- Tom London