watch command goes to syslog