# debug events to /events, but not on default udev_log="err" ENV{UDEV_LOG}=="[4-9]", RUN+="/sbin/udeventrecorder" # event to be catched by udevmonitor RUN+="socket:/org/kernel/udev/monitor"