Where do I configure where syslogd writes to log files?
I've got open files in an archive directory called errlog.131017 and audlog.131017 and, having run an fuser, it appears that syslogd is writing to these files.
It always helps if you mentioned the versions of your OS and syslog facility...
Did you check in /etc/*syslog.conf ? man syslog (or the topics shown in apropos syslog ) might help further.
Sorry solaris 10. Checked syslog.conf and it was set to the correct location.
Did a svcadm refresh and that seems to have fixed it.
syslogd writing to some archive directory? Now this seems to be an example of moving / renaming open files to another directory - on the same file system.