syslog-ng Community

Blogs

  • Calculate PI with syslog-ng

    Origin story We just realized that syslog-ng has a nice milestone as it reached the 3.14 version. I wanted to create something to celebrate it. There were a few ideas – still not forgotten, but in the end I though I do not want to extend syslog...
    • 3917 Views
    • 0 Comments
  • Insider 2018-04: RHEL6; Windows Event Log; Patched RPM; HEC; Conferences

    Dear syslog-ng users, This is the 66th issue of syslog-ng Insider, a monthly newsletter that brings you syslog-ng-related news. NEWS syslog-ng is available for RHEL 6 / CentOS 6 again After more than a year, the latest version of syslog-ng compiles a...
    • 3334 Views
    • 0 Comments
  • Splunk HEC: Sending logs using the program() destination of syslog-ng

    Recently Splunk started to recommend the use of the HTTP Event Collector (HEC) instead of forwarders. Syslog-ng supports this in multiple ways. Last time I showed you how to use the http() destination of syslog-ng. This time I introduce you to anothe...
    • 4220 Views
    • 0 Comments
  • syslog-ng at SCALE 2018

    It is the fourth year that syslog-ng has participated at Southern California Linux Expo or, as better known to many, SCALE ‒ the largest Linux event in the USA. In many ways, it is similar to FOSDEM in Europe, however, SCALE also focuses on users and...
    • 3401 Views
    • 0 Comments
  • How to collect Windows Event Logs with syslog-ng without installing an agent

    With the release of syslog-ng Premium Edition 7.0.6, you can collect Windows event logs without installing any third party application on your Windows-based computer. The benefits are obvious: You don’t need to install any additional applicati...
    • 15647 Views
    • 0 Comments
  • CentOS Dojo and FOSDEM 2018

    FOSDEM is one of the largest open source conferences in the world, with over 8000 participants. As many developers gather not just from Europe but from all around the world, there are a number of pre- and post conferences timed to happen before and a...
    • 3430 Views
    • 0 Comments
  • Insider 2018-02: New website; One Identity; Docker; Error messages; Elastic 6; DevConf

    Dear syslog-ng users, This is the 65th issue of syslog-ng Insider, a monthly newsletter that brings you syslog-ng-related news. NEWS New syslog-ng website Our new website – https://www.syslog-ng.com/ – is now live. It is a central hub of ...
    • 3232 Views
    • 0 Comments
  • DevConf 2018: long live containerization

    DevConf is a yearly conference for developers, administrators, and users of Linux and related technologies. It is organized by Red Hat in Brno, home to one of their major development centers. This event was the 10th in a row and the largest ever...
    • 3253 Views
    • 0 Comments
  • Common syslog-ng error messages and their solutions

    In this post, we would like to explain a few common syslog-ng error and warning messages, what they mean, and how to solve them. Destination queue full Destination queue full, dropping messages; queue_len='10000', log_fifo_size='10000&#...
    • 6615 Views
    • 0 Comments
  • Build your own syslog-ng RPM from patched Git sources on RHEL / CentOS 7

    When a user reports a problem with syslog-ng, developers create code to fix it. The fix is called a patch or a pull request (PR) in Git terminology. Often this code does not enter the main source code automatically but developers ask the user to test...
    • 4199 Views
    • 0 Comments
  • Latest syslog-ng is available for RHEL 6 / CentOS 6 again

    After more than a year, the latest version of syslog-ng compiles again on Red Hat Enterprise Linux version 6. This is thanks to a patch from Balázs Scheidler which resolves compatibility problems with older glib releases by implementing the mi...
    • 6019 Views
    • 0 Comments
  • syslog-ng and Elasticsearch 6: getting started on RHEL/CentOS

    Version 6 of the Elastic Stack has now been available for some time packed with new features and improved performance. Compatibility of syslog-ng was checked already during the alpha phase of development, as syslog-ng is becoming popular among Elasti...
    • 7353 Views
    • 0 Comments
  • Graylog as destination in syslog-ng

    Version 3.13 of syslog-ng introduced a graylog2() destination and a GELF (Graylog Extended Log Format) template to make sending syslog messages to Graylog easier. You can also use them to forward simple name-value pairs where the name starts with a d...
    • 5440 Views
    • 0 Comments
  • Sending logs to Splunk through HTTP

    For quite some time, Splunk has recommended to collect syslog messages using syslog-ng, save them to files, and send them to Splunk using forwarders. Unless you have a very high message rate, the HTTP destination of syslog-ng can greatly simplify thi...
    • 5402 Views
    • 0 Comments
  • syslog-ng and Elasticsearch 5: getting started on RHEL/CentOS

    For the last six months, Elastic’s communication centered around the upcoming Elastic Stack 5.0. And finally it is here: tons of new features, improved performance and a single version number for all Elastic products. Compatibility with syslog-...
    • 4157 Views
    • 0 Comments
  • Sending netdata metrics through syslog-ng to Elasticsearch

    netdata is a system for distributed real-time performance and health monitoring. You can use syslog-ng to collect and filter data provided by netdata and then send it to Elasticsearch for long-term storage and analysis. The aim is to send both metric...
    • 4812 Views
    • 0 Comments
  • Application adapters and enterprise-wide message model for syslog-ng

    Do you want to simplify parsing your log messages? Try the new “application adapter” and “enterprise-wide message model” frameworks in syslog-ng: you can automatically parse log messages and forward the results to another sysl...
    • 3674 Views
    • 0 Comments
  • Sending logs from Logstash to syslog-ng

    Logstash adds a new syslog header to log messages before forwarding them to a syslog server. In the case of syslog messages, it is problematic as there will be two syslog headers in the message. Using syslog-ng for everything logging related in an El...
    • 5958 Views
    • 0 Comments
  • Collecting syslog-ng statistics to Graphite

    syslog-ng makes available various types of statistics. Data is available in a couple of forms: emitted regularly from the internal() source of syslog-ng or obtained using the syslog-ng-ctl utility from the command line. Due to the format that the int...
    • 4357 Views
    • 0 Comments
  • Web interfaces for your syslog server – an overview

    This is the 2017 edition of my most popular blog about syslog-ng web-based graphical user interfaces (web GUIs). Many things have changed in the past few years. In 2011 only a single logging as a service solution was available, now I regularly run in...
    • 15377 Views
    • 0 Comments
  • Upgrading from syslog-ng open source to premium edition

    The syslog-ng application has two different editions. Most of my readers use syslog-ng open source edition (OSE). There is also a commercial version of syslog-ng, called the syslog-ng premium edition (PE). It comes with a few extra features, as well ...
    • 3707 Views
    • 0 Comments
  • Filling your data lake with log messages: the syslog-ng Hadoop (HDFS) destination

    Petabytes of data are now collected into huge data lakes around the world. Hadoop is the technology enabling this. While syslog-ng was able write logs to Hadoop using some workarounds (mounting HDFS through FUSE) for quite some time, the new Java-bas...
    • 4409 Views
    • 0 Comments
  • Installing syslog-ng on AWS Linux AMI

    You do not have to live without your favorite syslog implementation even in Amazon Web Services (AWS) Linux AMI. This Linux distribution is based on Red Hat Enterprise Linux version 6 and it is minimal extra work to install syslog-ng on it. Before yo...
    • 5210 Views
    • 0 Comments
  • Collecting logs from containers using Docker volumes

    This is the final blog post in a three-part series on logging in Docker using syslog-ng. I have already covered how to use syslog-ng in a Docker environment as a traditional central syslog server and how to collect host and container logs from the ho...
    • 8640 Views
    • 0 Comments
  • Creating time lapse videos from log messages using OpenShot

    You can create your own time lapse videos from log messages. It is not rocket science and is possible using a purely open source tool chain. In my previous blog, I explained how you can create a heat map from IP addresses in your log messages using s...
    • 3659 Views
    • 0 Comments