Insider 2019-06: Python; Google Stackdriver; elasticsearch-http(); a year of syslog-ng; Red Hat Summit;

Dear syslog-ng users,

This is the 74th issue of syslog-ng Insider, a monthly newsletter that brings you syslog-ng-related news.


Format your log messages in Python

Sometimes getting log messages into the desired format can be a problem, but with syslog-ng you can use Python to get the exact format you need. The syslog-ng Python template function allows you to write custom templates for syslog-ng in Python. In this blog post, I will show you a simple use of the Python parser: resolving IP addresses to host names. I will also show you the logger method, a nice new feature that enables you to log to syslog-ng’s internal() log source instead of writing logs from Python to stdout. This way you can follow what your Python code is doing even if syslog-ng is running as a daemon in the background.

Sending logs to Google Stackdriver using syslog-ng PE

Google Stackdriver collects and analyses logs, events and metrics of your infrastructure. Using syslog-ng PE 7.0.14 or later versions, you can send your logs to Google Stackdriver. While originally designed to quickly respond to events in the Google Cloud Platform (GCP), you can use Google Stackdriver with any other cloud providers (for example, Amazon Web Services) or on-premises data as well. This way you can view events of a hybrid infrastructure at a single location.

How to forward logs to Elasticsearch using the elasticsearch-http() destination in syslog-ng

Starting with syslog-ng 3.21.1, you can use the elasticsearch-http() destination (based on the http() destination) to send logs to Elasticsearch. In most cases it is more efficient than the old Java-based Elasticsearch destination, and it is definitely easier to configure.

A year of syslog-ng

With about two thirds of syslog-ng users running their logging application on Red Hat Enterprise Linux (or CentOS), it is one of our most important platforms both for the open source edition (OSE) and the premium edition (PE) of syslog-ng. Preparing for the annual Red Hat Summit, I made a list of major new features in syslog-ng since last year’s event.

Sudo + syslog-ng: two softwares at two conferences

I visited two conferences recently: LOADays and Red Hat Summit. Both conferences focus on open source softwares, but there the similarity ends. LOADays in Antwerp is small, free and focuses on Linux administrators. The Red Hat Summit in Boston is huge, expensive and covers a wide variety of topics, including administration (among many others). Regardless of the differences, both events are among my favorites.


• Pass the SALT 2019 ( syslog-ng workshop

• All Things Open (


• How to use the syslog-ng PE’s new Google Stackdriver destination

Your feedback and news, or tips about the next issue are welcome.

Related Content