Hi Alex! I've checked your attachments and I see that the messages are sent to pseudo-terminals and the serial port too: [2020-10-23T16:40:20.647481] Posting message to user terminal; user='thanos', line='/dev/ttyS0' [2020-10-23T16:40:20.647518] Posting message to user terminal; user='thanos', line='/dev/pts/0' [2020-10-23T16:40:20.647530] Posting message to user terminal; user='thanos', line='/dev/pts/1' [2020-10-23T16:40:20.647541] Posting message to user terminal; user='thanos', line='/dev/pts/2' Can you check which terminals are the user 'thanos' logged in? E.g. use the following command on the command line: $w thanos If you don't see a tty with ssh login, that can explain it. About the serial port, maybe it's misconfigured. Syslog-ng uses simple open/write calls on the device files , e.g. /dev/ttyS0. Can you try out if you can write in the /dev/ttyS0 file with a simple "echo test" command, please? Can you tell us a bit more about your host and how did you set up the serial port? Regards, Gabor ________________________________ From: syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Alexandre Santos <alexandre.rosas.santos@gmail.com> Sent: Friday, October 23, 2020 17:46 To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: [syslog-ng] Using usertty CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe. Hi, I am trying to use usertty(*) to send log all messages with severity equal or higher than critical to every user logged. But I am not getting any messages in serial port or ssh. I am sending the configurations and the debug log in attachment. Can you help me to understand what is happening? Thanks in advance, Alex