You can, as long as you use a recent enough syslog-ng (version 2.1 or later) with database support enabled. Syslog-ng uses libdbi to access databases, so you can use databases which are supported by libdbi on your system. If database support is not available in your syslog-ng, you have different options. You can download a precompiled binary from Balabit ( ), if it is available for your system. Or you can simply take advantage of syslog-ng's ability to pipe to a program.