If I understand it correctly, I think legato logs are stored in memory. You can only access them using the logread command.
A way to get them and pipe them into a file or a program, without having to manually start the command, would be to add a bash script into the /etc/init.d directory with something like :
logread -f | ... &
Feel free to correct me if I am wrong or if I misunderstood your question
Hey sorry to dig again into that thread but I found something that could help with logs.
There is a file: /etc/syslog-startup.conf where you can update the config to change the log output.
For example if you want to log into /home/root/syslog.log you can update the file to have something like this :
# first line change from buffer to file
DESTINATION=file # log destinations (buffer file remote)
# second line to telle where the file will be created
LOGFILE=/home/root/syslog.log # where to log (file)
REMOTE=loghost:514 # where to log (syslog remote)
REDUCE=no # reduce-size logging
DROPDUPLICATES=no # whether to drop duplicate log entries
#ROTATESIZE=0 # rotate log if grown beyond X [kByte]
#ROTATEGENS=3 # keep X generations of rotated logs
BUFFERSIZE=2000 # size of circular buffer [kByte]
FOREGROUND=no # run in foreground (don't use!)
#LOGLEVEL=5 # local log level (between 1 and 8)
To save the target from flash burnout, the syslog and core files are stored in the RAM file system under /tmp. When a crash occurs, this directory is created : /tmp/legato_logs/
To save RAM space, only the most recent 4 copies of each file are preserved. If the fault action for that app’s process is to reboot the target, the output location is changed to the below location (and the most recent files in RAM space are preserved across reboots):