# sudo_sendlog

## NAME



           **sudo_sendlog** — send sudo I/O log to log server
    


## SYNOPSIS



           **sudo_sendlog**[**-AnV**] [**-b** _ca_bundle_] [**-c** _cert_file_] [**-h** _host_] [**-i**
           _iolog-id_] [**-k** _key_file_] [**-p** _port_] [**-r** _restart-point_] [**-R**
           _reject-reason_] [**-s** _stop-point_] [**-t** _number_] _path_
    


## DESCRIPTION



           **sudo_sendlog** can be used to send the existing **sudoers** I/O log _path_
           to a remote log server such as _sudo_logsrvd_(8) for central
           storage.
    
           The options are as follows:
    
           **-A** , **--accept-only**
                   Only send the accept event, not the I/O associated with
                   the log.  This can be used to test the logging of accept
                   events without any associated I/O.
    
           **-b** , **--ca-bundle**
                   The path to a certificate authority bundle file, in PEM
                   format, to use instead of the system's default certificate
                   authority database when authenticating the log server.
                   The default is to use the system's default certificate
                   authority database.
    
           **-c** , **--cert**
                   The path to the client's certificate file in PEM format.
                   This setting is required when the connection to the remote
                   log server is secured with TLS.
    
           **--help** Display a short help message to the standard output and
                   exit.
    
           **-h** , **--host**
                   Connect to the specified _host_ instead of localhost.
    
           **-i** , **--iolog-id**
                   Use the specified _iolog-id_ when restarting a log transfer.
                   The _iolog-id_ is reported by the server when it creates the
                   remote I/O log.  This option may only be used in
                   conjunction with the **-r** option.
    
           **-k** , **--key**
                   The path to the client's private key file in PEM format.
                   This setting is required when the connection to the remote
                   log server is secured with TLS.
    
           **-n** , **--no-verify**
                   If specified, the server's certificate will not be
                   verified during the TLS handshake.  By default,
                   **sudo_sendlog** verifies that the server's certificate is
                   valid and that it contains either the server's host name
                   or its IP address.  This setting is only supported when
                   the connection to the remote log server is secured with
                   TLS.
    
           **-p** , **--port**
                   Use the specified network _port_ when connecting to the log
                   server instead of the default, port 30344.
    
           **-r** , **--restart**
                   Restart an interrupted connection to the log server.  The
                   specified _restart-point_ is used to tell the server the
                   point in time at which to continue the log.  The
                   _restart-point_ is specified in the form
                   “seconds,nanoseconds” and is usually the last commit point
                   received from the server.  The **-i** option must also be
                   specified when restarting a transfer.
    
           **-R** , **--reject**
                   Send a reject event for the command using the specified
                   _reject-reason_ , even though it was actually accepted
                   locally.  This can be used to test the logging of reject
                   events; no I/O will be sent.
    
           **-s** , **--stop-after**
                   Stop sending log records and close the connection when
                   _stop-point_ is reached.  This can be used for testing
                   purposes to send a partial I/O log to the server.  Partial
                   logs can be restarted using the **-r** option.  The _stop-point_
                   is an elapsed time specified in the form
                   “seconds,nanoseconds”.
    
           **-t** , **--test**
                   Open _number_ simultaneous connections to the log server and
                   send the specified I/O log file on each one.  This option
                   is useful for performance testing.
    
           **-V** , **--version**
                   Print the **sudo_sendlog** version and exit.
    
       **Debugging sendlog**
           **sudo_sendlog** supports a flexible debugging framework that is
           configured via _Debug_ lines in the _sudo.conf_(5) file.
    
           For more information on configuring _sudo.conf_(5), refer to its
           manual.
    


## FILES



           _/etc/sudo.conf_            Sudo front-end configuration
    


## BUGS



           If you believe you have found a bug in **sudo_sendlog** , you can
           either file a bug report in the sudo bug database,
           https://bugzilla.sudo.ws/, or open an issue at
           https://github.com/sudo-project/sudo/issues.  If you would prefer
           to use email, messages may be sent to the sudo-workers mailing
           list, https://www.sudo.ws/mailman/listinfo/sudo-workers (public)
           or <sudo@sudo.ws> (private).
    
           Please do not report security vulnerabilities through public
           GitHub issues, Bugzilla or mailing lists.  Instead, report them
           via email to <Todd.Miller@sudo.ws>.  You may encrypt your message
           with PGP if you would like, using the key found at
           https://www.sudo.ws/dist/PGPKEYS.
    


## SUPPORT



           Limited free support is available via the sudo-users mailing list,
           see https://www.sudo.ws/mailman/listinfo/sudo-users to subscribe
           or search the archives.
    


## DISCLAIMER



           **sudo_sendlog** is provided “AS IS” and any express or implied
           warranties, including, but not limited to, the implied warranties
           of merchantability and fitness for a particular purpose are
           disclaimed.  See the LICENSE.md file distributed with **sudo** or
           https://www.sudo.ws/about/license/ for complete details.
    


* * *