The syslog-ng open source edition is the direct descendant of the syslog-ng project that started ten years ago. The application can operate in server or agent mode, and - apart from UDP - supports the reliable TCP and the encrypted TLS protocols. That way syslog-ng can be used to create flexible and reliable logging infrastructure even in heterogeneous environments.
BalaBit offers commercial support for syslog-ng Open Source Edition in the form of traditional support services and yearly subscription to binary packages (both are available in the Web Store). Visit our support page for more information.
Log messages may contain sensitive information that should not be accessed by third parties. Therefore, syslog-ng Premium Edition uses the Transport Layer Security (TLS) protocol to encrypt the communication. TLS also allows the mutual authentication of the host and the server using X.509 certificates.
Storing your log messages in a database allows you to easily search and query the messages and interoperate with log analyzing applications. The syslog-ng application supports the following databases: MySQL, Microsoft SQL (MSSQL), Oracle, PostgreSQL, and SQLite.
The syslog-ng application supports the well-known BSD-syslog standard and also the latest syslog protocol standard developed by IETF.
The syslog-ng application can sort the incoming log messages based on their content and various parameters like the source host, application, and priority. It can also separate parts of log messages to named fields or columns, and modify the values of these fields, for example to remove sensitive data. Directories, files, and database tables can be created dynamically using macros - it is even possible to create custom templates and reformat the messages. Complex filtering using regular expressions and boolean operators offers almost unlimited flexibility to forward only the important log messages to the selected destinations.
The syslog-ng application is the ideal choice to collect logs in massively heterogeneous environments using several different operating systems and hardware platforms, including Linux, Unix, BSD, Sun Solaris, HP-UX, and IBM AIX.
The syslog-ng application is optimized for performance, and can handle enormous amount of messages. Depending on its exact configuration, it has been known to process over 75,000 messages per second real-time, and over 24 GB raw logs per hour on entry-level server hardware.
Bazsi's developer blog |