The syslog-ng Insider 2021-11: 3.35; SSB; MacOS; mqtt() destination updates;

Dear syslog-ng users,

This is the 96th issue of syslog-ng Insider, a monthly newsletter that brings you syslog-ng-related news.


syslog-ng 3.35.1 available

Version 3.35.1 of syslog-ng is released. New features include:

  • APT repo for x86 Debian and Ubuntu

  • Throttle filter

  • MQTT source

  • PROXY header before TLS payload

You can read more details and download the syslog-ng source code at

Sending logs from syslog-ng store box to Splunk

One of the most popular applications to feed Splunk with syslog messages is syslog-ng. However not everyone is happy to work on the command line anymore. This is where syslog-ng store box (SSB), an appliance built around syslog-ng, can help. The SSB GUI provides you not only with an easyto-use interface to configure most syslog-ng features, but also a search interface and complete log life cycle management. It can forward log messages to several destinations, recently also to Splunk’s HTTP Event Collector (HEC). From this blog you can learn about how SSB fits into your logging infrastructure and how to configure SSB for Splunk.

MacOS support

For the past couple of months, Yash Mathne has been working on testing syslog-ng on MacOS as a GSoC (Google Summer of Code) student. He worked both on x86 and on the freshly released ARM hardware. And we have some good news here to share: while there is still room for improvement, most of syslog-ng works perfectly well on MacOS. You can read the two parts of his report at:


Technical details:

Syslog-ng 3.34: MQTT destination with TLS and WebSocket support

Version 3.33 of syslog-ng arrived with basic MQTT support. Version 3.34 has added many important features to it: user authentication, TLS support and WebSocket support. These features give you both security and flexibility while sending log messages to an MQTT broker. This blog helps you to make your first steps securing your MQTT connection.


Your feedback and news, or tips about the next issue are welcome. To read this newsletter online, visit:

Related Content