syslog-ng Open Source Edition 3.19 - Release Notes

Release Notes

syslog-ng Open Source Edition 3.19

Release Notes

December 2018

These release notes provide information about the syslog-ng Open Source Edition release.


Was this topic helpful?

[Select Rating]



Supported platforms

The syslog-ng Open Source Edition application is highly portable and is known to run on a wide range of hardware architectures (x86, x86_64, SUN Sparc, PowerPC 32 and 64, Alpha) and operating systems, including Linux, BSD, Solaris, IBM AIX, HP-UX, Mac OS X, Cygwin, Tru64, and others.


Was this topic helpful?

[Select Rating]



New Features

What is new in syslog-ng Open Source Edition 3.19?

Version 3.19 of syslog-ng Open Source Edition includes the following main features.

Load balancing and other http() improvements

The http() destination can now send log messages to the destination URLs in a load-balance fashion. This means that syslog-ng OSE sends each message to only one URL. For example, you can use this to send the messages to a set of ingestion nodes or indexers of your SIEM solution if a single node cannot handle the load. For details, see "Batch mode and load balancing" in the Administration Guide.

The syslog-ng OSE http() destination now automatically follows URL redirects (maximum 3), and can use the certificate store of the system (you can enable it using the use-system-cert-store() option).

Note that the flush-bytes(), flush-lines(), and flush-timeout() options have been renamed to batch-bytes(), batch-lines(), and batch-timeout(), respectively.

Slack destination

You can now directly send messages and alerts into Slack channels. For details, see "slack: Sending alerts and notifications to a Slack channel" in the Administration Guide.

Enhancements
  • The cisco-parser() now properly handles Cisco Catalyst formatted triplets.

  • The system() source now automatically handles RFC5424-formatted log messages, thus supporting FreeBSD 12.0.

  • When using TLS-encrypted communication, you can now compress the on-the-wire traffic using the allow-compress() option. Note that this option must be enabled both on the server and the client to have any effect. Enabling compression can significantly reduce the bandwidth required to transport the messages, but can slightly decrease the performance of syslog-ng OSE, reducing the number of transferred messages during a given period.

  • The network() and syslog() source drivers can bind to an interface instead of an IP address using the interface() option.

  • The network() and syslog() source drivers can reuse ports using the so-reuseport() option.


Was this topic helpful?

[Select Rating]



Resolved Issues

For a detailed list of issues resolved in this release, see syslog-ng Releases page.


Was this topic helpful?

[Select Rating]



Blogs
Using the syslog-ng Store Box (SSB) in front of Splunk
Containers and automation: five conferences in two words
Webinars
Make your logging infrastructure GDPR compliant
Optimize your SIEM
Feeding log data into your Data Lake
Optimized Log Collection and Distribution
Never Lose Another Log Message
Related Documents