Blog

Syslog-ng hardening using Tor

Peter Czanik — Wed, 29 Jul 2026 11:27:45 GMT

For many years, I didn’t think that Tor could be useful for me. However, I’ve recently found a Gist on GitHub that describes how you can use it to harden your central syslog-ng server. And while I have yet to try it, at least now I have a...(read more)

Syslog-ng journald source: how to avoid log bombs on errors?

Peter Czanik — Wed, 22 Jul 2026 11:39:37 GMT

Up until version 4.12, when syslog-ng ran into an error jumping to a saved systemd journal position, it read the journal from the beginning. With the latest syslog-ng version, you can configure what happens in case of such an error. Before you begin ...(read more)

Syslog-ng 4.12.0 available for Ubuntu 26.04 (Resolute)

Peter Czanik — Tue, 14 Jul 2026 12:09:47 GMT

Recently I was asked if syslog-ng supports Ubuntu 26.04 (Ubuntu Resolute). Yes, and with the arrival of the syslog-ng 4.12.0 release we also provide ready-to-use packages for it. The release notes mention it, and info is in the Readme on GitHub. I te...(read more)

Syslog-ng Java destination disabled

Peter Czanik — Thu, 09 Jul 2026 13:07:45 GMT

For many years, syslog-ng used Java, where C libraries were unavailable. However, over the years native C libraries became available for Elasticsearch and Kafka, and HDFS practically disappeared. As a “scream test”, I am going to disable ...(read more)

The status of OpenSSL 4.0 support in syslog-ng

Peter Czanik — Thu, 04 Jun 2026 11:18:54 GMT

OpenSSL 4.0 was released just over a month ago. So, how is its support progressing in syslog-ng? Well, Git master already supports it, and the patch is easy to backport to earlier releases. At the same time, version 4.12 will support OpenSSL 4.0 out ...(read more)

Nightly syslog-ng containers based on Alma Linux

Peter Czanik — Tue, 26 May 2026 10:58:35 GMT

For many years, the syslog-ng project provided container images based on Debian. Most of our users run syslog-ng on RHEL & compatibles, and have asked for an RPM-based container. So, nightly containers based on Alma Linux are now also available. ...(read more)

Learning syslog-ng

Peter Czanik — Tue, 19 May 2026 10:54:47 GMT

How can you learn syslog-ng? There are many possibilities, depending on your time and budget. Possibilities range from tutorial series through reading the documentation to instructor-led training. Find out which one is for you! Getting started: tutor...(read more)

The syslog-ng Insider 2026-05: OTEL; central log collection; old Mac

Peter Czanik — Thu, 14 May 2026 11:25:48 GMT

Dear syslog-ng users, This is the 140th issue of syslog-ng Insider, a monthly newsletter that brings you syslog-ng-related news. NEWS Streaming syslog-ng data to your lakehouse using OTEL Version 4.11.0 of syslog-ng contains contributions from Datab...(read more)

Fedora 44, CentOS 7 and Amazon Linux syslog-ng questions

Peter Czanik — Wed, 06 May 2026 10:55:31 GMT

Fedora 44 was announced last week: syslog-ng 4.11 is part of it. While checking the Fedora Copr build service for Fedora 44, I realized that CentOS 7 and Amazon Linux 2023 packages are also there. I have a few questions for you! Fedora 44 The availab...(read more)

Support for OpenSSL 4.0?

Peter Czanik — Tue, 28 Apr 2026 12:58:28 GMT

Although OpenSSL 4.0 released just two weeks ago, the syslog-ng project has already received a GitHub issue complaining that we do not support it. So, before we would allocate too much effort on it: what should we expect? OpenSSL 4.0 was announced on...(read more)

New performance tuning possibilities in syslog-ng

Peter Czanik — Wed, 22 Apr 2026 10:38:11 GMT

On April’s fool’s day, I shared that syslog-ng can reach 7 million EPS. This test lab result was in part possible thanks to a few performance enhancements coming to syslog-ng version 4.12. How 7 million EPS is possible? Before diving deep...(read more)

Streaming syslog-ng data to your lakehouse using OpenTelemetry

Peter Czanik — Wed, 15 Apr 2026 11:58:53 GMT

Version 4.11.0 of syslog-ng contains contributions from Databricks related to OAuth2 authentication. Recently, they published a blog about how this enables their customers to send logs to their data lake using syslog-ng and the OpenTelemetry protocol...(read more)

The syslog-ng Insider 2026-04: wildcard-file; fix; UDP

Peter Czanik — Wed, 08 Apr 2026 13:31:20 GMT

Dear syslog-ng users, This is the 139th issue of syslog-ng Insider, a monthly newsletter that brings you syslog-ng-related news. NEWS Automatic configuration of the syslog-ng wildcard-file() source Reading files and monitoring directories became a l...(read more)

Compiling syslog-ng on an old Mac

Peter Czanik — Tue, 24 Mar 2026 09:06:04 GMT

I have an aging, but fully functional MacBook. I bought it for syslog-ng testing, but I also use for watching movies. Homebrew no more fully supports old, Intel-based Macs. This blog helps to compile the latest syslog-ng release on these old, but oth...(read more)

Central log collection - more than just compliance

Peter Czanik — Wed, 18 Mar 2026 12:05:25 GMT

I often hear, even at security conferences that “no central log collection here” or “we have something due to compliance”. Central logging is more than just compliance. It makes logs easier to use, available and secure, thus m...(read more)