The syslog-ng Insider 2022-06: 3.37; hardware; Apache; disk-buffer;

Dear syslog-ng users,

This is the 102nd issue of syslog-ng Insider, a monthly newsletter that brings you syslog-ng-related news.


syslog-ng 3.37 released

Balázs Scheidler, founder of the syslog-ng project, describes the latest syslog-ng release:

“syslog-ng 3.37 has just been released, packages available in various platforms this week. You can get the detailed release notes on the github releases page, however I felt this would be a good opportunity to revisit my draft on the syslog-ng long term objectives and how this release builds in that direction.”

Read the rest of the blog at

When (not) to use the syslog-ng disk-buffer

The syslog-ng disk buffer is one of the most often used syslog-ng options to ensure message delivery. However, it is not always necessary and using the safest variant has serious performance impacts. If you utilize disk-buffer in your syslog-ng configuration, it is worth to make sure that you use a recent syslog-ng version.

From this blog, you can learn when to use the disk-buffer option, the main differences between reliable and non-reliable disk-buffer, and why is it worth to use the latest syslog-ng version.

Hardware for a syslog-ng server

What hardware to use for a syslog-ng server? It is a frequent question with no definite answer. It depends on many factors: the number and type of sources, the number of logs, the way logs are processed, and so on. My experience is that for the majority users even a Raspberry Pi would be enough. But of course, not for everyone.

Analyzing Apache HTTPD logs in syslog-ng

Recently, I started my own blog, and as Google Analytics seems to miss a good part of visitors, I wanted to analyze my web server logs myself. I use syslog-ng to read Apache logs, process them, and store them to Elasticsearch. Along the way, I resolve the IP address using a Python parser, analyze the Agent field of the logs, and also use GeoIP to locate the user on the map.

From this blog, you can learn how I built my configuration. Note that once I was ready, I realized that my configuration is not GDPR compliant, so I also show you which parts to remove from the final configuration :-).


Your feedback and news, or tips about the next issue are welcome. To read this newsletter online, visit:

Related Content