Log messages contain information about the events happening on the hosts. Monitoring system events is essential for security and system health monitoring reasons.
The original syslog protocol separates messages based on the priority of the message and the facility sending the message. These two parameters alone are often inadequate to consistently classify messages, as many applications might use the same facility, and the facility itself is not even included in the log message. To make things worse, many log messages contain unimportant information. The syslog-ng application helps you to select only the really interesting messages, and forward them to a central server.
Company policies or other regulations often require log messages to be archived. Storing the important messages in a central location greatly simplifies this process.
Was this topic helpful?
Leave a Comment
Thank you. We appreciate your feedback
What is new in syslog-ng Open Source Edition version 3.33?
This section lists the most recent changes of syslog-ng Open Source Edition (syslog-ng OSE).
Version 3.32 - 3.33
New destination: mqtt()
From version 3.33, you can use the mqtt() destination to publish messages to MQTT brokers.
Version 3.31 - 3.32
New option added to syslog-parser(): drop-invalid ()
From version 3.32, you can use the drop-invalid() option in syslog-parser().
Version 3.30 - 3.31
New rewrite function:set-pri()
From version 3.31, the syslog-ng OSE application supports using the set-pri() rewrite function, which sets the PRI value of a syslog message by specifying a template string.
Silent message option in telegram() destination
From version 3.31, you can use the disable_notification() option in the telegram() destination to send silent messages to Telegram.
New pattern parser: @OPTIONALSET@
From version 3.31, you can use the @OPTIONALSET@ parser to parse any combination of the specified characters.
New flag in syslog-parser(): no-header
From version 3.31, you can use the no-header flag in the syslog-parser() parser.
Version 3.29 - 3.30
New template function: filter()
From version 3.30, the syslog-ng OSE application supports using the filter() template function, which runs the filter expression on each element of a given list, and returns only those list elements that meet the requirements of the filter expression.
New option for systemd-journal() source: namespace()
The syslog-ng application is used worldwide by companies and institutions who collect and manage the logs of several hosts, and want to store them in a centralized, organized way. Using syslog-ng is particularly advantageous for:
Internet Service Providers
Financial institutions and companies requiring policy compliance
The syslog-ng Open Source Edition (syslog-ng OSE) application is highly portable and is known to run on a wide range of hardware architectures (x86, x86_64, SUN Sparc, PowerPC 32 and 64, Alpha) and operating systems, including Linux, BSD, Solaris, IBM AIX, HP-UX, Mac OS X, Cygwin, and others.
The source code of syslog-ng Open Source Edition is released under the GPLv2 license and is available on GitHub.