--- etc/riemann.config.orig	Tue Dec  6 07:47:54 2016
+++ etc/riemann.config	Wed Dec 21 00:28:50 2016
@@ -1,7 +1,7 @@
 ; -*- mode: clojure; -*-
 ; vim: filetype=clojure
 
-(logging/init {:file "riemann.log"})
+(logging/init {:file "${LOCALSTATEDIR}/log/riemann/riemann.log"})
 
 ; Listen on the local interface over TCP (5555), UDP (5555), and websockets
 ; (5556)