History of syslog-ng

Last update Mar. 20^th 2013 5:56:58 PM

Creation date Mar. 19^th 2013 7:13:35 PM

• 
  miceno on Mar. 20^th 2013 5:56:58 PMReport

  license

  LGPL

  Latest version

  Open Source Edition (OSE) 3.4 (Feb 2013)

• 
  miceno on Mar. 20^th 2013 4:39:15 PMReport

  Named pipe

  yes

  Handle multi-line messages like Apache Tomcat or Oracle log messages

  no

  Standard output (stdout) of an application

  yes

• 
  miceno on Mar. 20^th 2013 4:26:02 PMReport

  ability to execute shell scripts on received messages

  DNS cache

  yes

• 
  miceno on Mar. 20^th 2013 4:17:51 PMReport

  ability to preserve the original hostname in NAT environments and relay chains

  yes

  on the wire (zlib) message compression

  - only when using TLS

  good timestamp format control; at a minimum, ISO 8601/RFC 3339 second-resolution UTC zone

  yes microsecond time resolution, extended RFC3339, timezone information

  control of log output format, including ability to present channel and priority as visible log data

  yes

  ability to include config file from within other config files

  yes

• 
  miceno on Mar. 20^th 2013 4:10:57 PMReport

  support for (plain) tcp based syslog

  yes

  udp syslog

  yes

  native ability to send SNMP traps

  - only in syslogng box appliance

  support for TLS/SSL-protected syslog

  yes

  support for IETF's new syslog-protocol draft

  yes

  support for IETF's new syslog-transport-tls draft

  yes

  support for IPv6

  yes

  UNIX domain socket

  yes

  UDP

  yes

  kernel log

  yes

  RFC 3195/BEEP

  yes

  TCP

  yes

  file

  yes

  Windows Event Log

  - via separate agent only available at Personal Edition

  Filtering for syslog facility and priority

  yes

  Filtering for hostname

  yes

  Filtering for message contents

  yes

  Filtering for application

  yes

  Filtering for sending IP address

  yes

  support for complex filters, using full boolean algebra with and/or/not operators and parenthesis

  yes

  Support for reusable filters: specify a filter once and use it in multiple selector lines no

  yes

  support for arbritrary complex arithmetic and string expressions inside filters

  yes

  ability to use regular expressions in filters

  yes PRCE and POSIX

  ability to filter on any other message field not mentioned above (including substrings and the like)

  yes

  support for discarding messages based on filters

  yes

  MySQL

  yes

  PostgreSQL

  yes

  Oracle

  yes

  SQLite

  yes

  Microsoft SQL (Open TDS)

  yes

  ability to generate file names and directories (log targets) dynamically

  yes

  ability to reformat message contents and work with substrings

  yes

  support for log files larger than 2gb

  yes

  support for log file size limitation and automatic rollover command execution

  yes

  massively multi-threaded for tomorrow's multi-core machines

  yes

  using text files as input source

  yes

  rate-limiting output actions

  yes

  flow control (slow down message reception when system is busy)

  yes

  rewriting messages

  yes

  output data into various formats

  yes

  supported platforms Linux, BSD, anecdotical seen on Solaris; compilation and basic testing done on HP UX

  yes

• 
  miceno on Mar. 19^th 2013 7:15:10 PMReport

  Editor

  public

  Viewer

  public

• 
  miceno on Mar. 19^th 2013 7:13:35 PMReport

  Mode

  70

  Name

  syslog-ng

  Viewer

  unlisted

  Editor

  miceno-1km2vspw

  Category

  it-development

  Website

  http://www.balabit.com/network-security/syslog-ng/

  ability to execute shell scripts on received messages

  yes