Rsyslog

Rsyslog is a rocket-fast system for log processing.

It offers high-performance, great security features and a modular design. While it started as a regular syslogd, rsyslog has evolved into a kind of swiss army knife of logging, being able to accept inputs from a wide variety of sources, transform them, and output to the results to diverse destinations.

It can deliver over one million messages per second to local destinations when limited processing is applied (based on v7, December 2013). Even with remote destinations and more elaborate processing the performance is usually considered “stunning”.

It has a strong enterprise focus but also scales down to small systems. It supports, among others, MySQL, PostgreSQL, failover log destinations, ElasticSearch, syslog/tcp transport, fine grain output format control, high precision timestamps, queued operations and the ability to filter on any message part.

Feature

• Multi-threading
• TCP, SSL, TLS, RELP
• MySQL, PostgreSQL, Oracle and more
• Filter any part of syslog message
• Fully configurable output format
• Suitable for enterprise-class relay chains

Changelog v8.1907

– 2019-07-05 imuxsock: support FreeBSD 12 out of the box FreeBSD 12 uses RFC5424 on the system log socket by default. This format is not supported by the special parser used in imuxsock. Thus for FreeBSD the default needs to be changed to use the regular parser chain by default. That is all this commit does. closes https://github.com/rsyslog/rsyslog/issues/3694
– 2019-07-05 function bugfix: “ipv42num” misspelled as “ip42mum” (without “v”)
To fix the issue but keep compatible with existing deployments both function names are now supported.
closes https://github.com/rsyslog/rsyslog/issues/3676
– 2019-07-04 fix leading double space in rsyslog startup messages see also https://github.com/rsyslog/rsyslog/issues/2979
– omamqp1: port to latest api, add tests This brings omamqp1 up-to-date with the latest qpid-proton-c
api version. This also adds a test for the plugin, to test the basic functionality. The test requires the user to
install qdrouterd and the python qpid-proton library in order to use the simple_recv.py test program.
Thanks to Richard Megginson for the patch.

More…

Download & Use

Copyright (C) Rainer Gerhards <rgerhards@adiscon.com> lead rsyslog developer