I'm currently studying for my Red Hat Certification exam, and I've come across an example in my book dealing with system log architecture. I'm currently working a classroom RHEL7 environment.

My question is about the syntax but here is the lab so you have all of the info:

I am asked to configure rsyslogd so that it records syslog messages to authentication and security issues that have priority alert or higher to the file /var/log/auth-errors. I'm asked to use the file /etc/rsyslog.d/auth-errors.conf to do this, creating the file if necessary.

Can anyone explain to me the significance of the d? I'm confused about the difference between rsyslogd, rsyslog.d and rsyslog.

My guess is that the d signifies a daemon but I'd like to be sure.

Any guidance is appreciated!

  • Everything that you should know for this is already in chapter 13 if you're using Sander his book.
    – hspaans
    Commented Jun 7, 2016 at 23:46
  • I'm not using the book you referenced.
    – Melody
    Commented Jun 20, 2016 at 16:14
  • @hspaans the good old rtfm answer
    – Tristan
    Commented Dec 6, 2018 at 13:01
  • I'd say this is duplicate question with : unix.stackexchange.com/questions/4029/…
    – Tristan
    Commented Dec 6, 2018 at 13:02
  • @Tristan no a reference to where it is documented instead of duplicating copyrighted text. That is also why it was a comment and not an answer to the question.
    – hspaans
    Commented Dec 6, 2018 at 22:59

1 Answer 1


rsyslogd is the rsyslog daemon, an open source implementation of syslog, and has replaced syslogd in newer systems. Here the final d means indeed daemon.

/etc/rsyslog.d/ is just the directory where rsyslog's configuration files are kept. Rsyslog, just like the majority of the services nowadays, uses split configuration files (one file for each source) as opposed to a big configuration file containing all the sources. If you take a look into /etc/ you will find that many other services are organized in a similar way, for instance /etc/httpd/conf.d/.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .