Insider 2018-04: RHEL6; Windows Event Log; Patched RPM; HEC; Conferences

Dear syslog-ng users,

This is the 66th issue of syslog-ng Insider, a monthly newsletter that brings you syslog-ng-related news.


syslog-ng is available for RHEL 6 / CentOS 6 again

After more than a year, the latest version of syslog-ng compiles again on Red Hat Enterprise Linux version 6. This is thanks to a patch from Balázs Scheidler which resolves compatibility problems with older glib releases by implementing the missing functions within syslog-ng.

Agentless Windows logging

With syslog-ng Premium Edition, you can collect Windows event logs without installing any third-party application on your Windows-based computer.
Learn more about it from our blog at or join our webinar where you can also ask questions:

Build your own syslog-ng RPM

When a user reports a problem with syslog-ng, developers create code to fix it. The fix is called a patch or a pull request (PR) in Git terminology. Often this code does not enter the main source code automatically but developers ask the user to test the fix before the code is merged. A new challenge starts here: figuring out how to test a proposed fix. This blog shows you how to download and patch the syslog-ng source code and build easy-to-install (and remove) RPM packages from it.
While this blog introduces you to package building in depth, a lot simpler method is also available for Ubuntu packages and should be working soon again for RHEL / CentOS as well:

Sending logs to Splunk HEC

Recently Splunk started to recommend the use of the HTTP Event Collector (HEC) instead of forwarders. syslog-ng supports this in multiple ways. In a previous blog, we showed you how to use the http() destination of syslog-ng. This time, we introduce you to another possibility: using an external python script to send logs to HEC.
Read our blog at or watch the webinar at

Conferences: CentOS Dojo, FOSDEM and SCALE

Recently syslog-ng was presented at some popular open source conferences. Read about the presentations and experiences in related blogs:
CentOS Dojo & FOSDEM:


LOADays: (Antwerp)
Red Hat Summit: (San Francisco)

Your feedback and news, or tips about the next issue are welcome at