ceelog.conf man page

ceelog.conf — format of ceelog configuration


Applications linking to libceelog can use various event sources. By default, they use a built-in default event source (described below).

To use a different event source, set the CEELOG_CONFIG environment variable to a path name of a ceelog configuration file described below. If CEELOG_CONFIG is not set, no configuration file is read by default and the built-in default event source is used.

The configuration file

The configuration file uses a GKeyFile format, described in the GLib documentation.

Currently all settings use a single group named config. Within this group, the type key specifies a log source type, which must be one of the values described in the following subsections.

The log_file Source Type

The log_file source type has a single mandatory parameter filename, which specifies a path to the log file.

The event source reads events from filename, expecting one event per line using the traditional syslog log file format (i.e. each line is a "syslog message" as described in RFC 3164 without the leading PRI part).

It can block until more events are written into the file, and automatically switches to the new file if the log at filename is rotated away and replaced by a new file.

The static_file Source Type

The static_file source type is similar to log_file and uses the same mandatory parameter filename and the same input format. It assumes that the input file is a not being modified, and thus supports neither appending more events nor log rotation.

If an application requires blocking for more events (e.g. using the -f option of ceelog(1)), a static_file event source will nevertheless immediately return a "no more events" indication after reaching end of the input file.

The Default Event Source

If no configuration is present, libceelog uses a default event source.

Currently, this is a source type log_file reading from /var/log/messages, however this may change in the future. The intent of the default is to read all log events from the default log storage maintained by the operating system.



Path to a ceelog configuration file, using the format described above.

If the environment value exists but it is set to an empty value, it is ignored and the default event source is used.


A log file read by the default event source.


The following configuration is equivalent to the default event source as it is currently implemented:

type = log_file
filename = /var/log/messages

Referenced By


Explore man page connections for ceelog.conf(5).

ceelog CEELOG 2013-05-21