syslog-ng

This week was a busy one for us Balabiters: we participated in RedHat Summit at Moscone Center and we organized a Techie Happy Hour meetup at Cafe Prague with fellow syslog-ng users. RedHat summit was a first for me and I really liked how it worked out. Both the organization and the venue was fantastic, […]

This is the 2nd time in a week that I sit in a presentation about User Behaviour Analytics (UBA), be it named Security Analytics, Data Driven Security or whatever. The common theme in these presentation is that the key messages are at pretty high level (stuff like no false alarms, detecting the unknown unknowns, no […]

The syslog-ng configuration language is pretty good at describing how our messages need to be routed, filtered and parsed. There’s however an equally powerful feature that is not being used to its full extent right now: its ability to reuse blocks of configuration elements. Imagine that you have a pretty standard application and you want […]

Hi all, For a while, both syslog-ng and rsyslogd supported JSON encapsulated messages, even when submitted on /dev/log by the application. Yeah, this means that you can use the traditional syslog(3) API to submit structured messages. This is how: syslog(LOG_NOTICE, "@cee: { \"msg\": \"this is my message\"}"); I know that CEE is dead, but we […]

Dear syslog-ng users, I would like to announce that Gergely Nagy (aka @algernoone on Twitter and algernon on github), is taking over the maintenance of syslog-ng master from me. He was maintaining the older stable versions for a few years now, was also active in creating syslog-ng binaries and started the syslog-ng Incubator, and is […]

syslog-ng has just received support for accepting application logs directly from nodejs applications. All you need is the use of the widespread winston logging API, and syslog-ng will happily process its JSON formatted messages. You only need to make ... [More] use of the new nodejs() driver that automatically sets up everything with defaults ready to go. […] [Less]

It’s been a while since I’ve last updated this blog. I’ll try to concentrate a bit more here, so the updates related to syslog-ng development get out. Since the last post syslog-ng 3.4 was actually released. And we have started working on the 3.5 branch. There are already two features integrated into 3.5: support for […]

Just before christmas I’ve released syslog-ng 3.4.0beta1, hopefully the last before the final release of syslog-ng 3.4. You can find the list of changes since 3.4.0alpha3 here. Here’s the teaser for those wondering what 3.4 can do for them in ... [More] addition to 3.3: Junctions, channels and the improved configuration format allows specifying log processing rules […] [Less]

I had very limited time recently to update this blog, however I’ve started some twitter activity where I can post my tiny little posts without having to re-read them a number of times. This makes it possible to _at least_ publish some syslog-ng updates, so in case you are interested, just follow @Bazsi771 or search […]

You may remember the Lumberjack project I wrote about earlier. It is an attempt to improve system logging  by creating conventions and standards to cover structured logs in a general way. Since its inception, a lot of discussion happened on the lumberjack mailing list, a preliminary list of fields to be used got defined, and […]