8. Console

Up to two console devices are supported, both of which may also be named pipes. If running as daemon, samhain will use /dev/console for output, otherwise stdout. On Linux, _PATH_CONSOLE will be used instead of /dev/console, if it is defined in the file /usr/include/paths.h.

You can override this at compile time, or in the [Misc] section of the configuration file with the SetConsole= device option. Up to two console devices are supported, both of which may also be named pipes (use the SetConsole option twice to set both devices).

[Tip]Switching off

Invariably, some users set SetConsole= /dev/null to switch off console logging. This is highly ineffective, as the device will be opened, and the message written to it, for every log message. The correct way is to use PrintSeverity= none in the [Log] section of the configuration file (or the command line switch '-p none').