rsyslog

Entreprises > Dévelopement informatique
2013-03-20 17:56:58
syslog
rsyslog
Mis à jour2013-03-20 17:56:58
Site webhttp://www.rsyslog.com
licenseGPLv3 (GPLv2 for v2 branch)
Input Sources
UNIX domain socketOui
UDPOui
TCPOui
RELPOui
RFC 3195/BEEPOui (via im3195)
kernel logOui
fileOui
mark message generator as an optional inputOui
Standard output (stdout) of an application
Named pipe
Handle multi-line messages like Apache Tomcat or Oracle log messages
Windows Event LogOui a Windows event logging software such as EventReporter orMonitorWare Agent (both commercial software, both fund rsyslogdevelopment)
Network (Protocol) Support
support for (plain) tcp based syslogOui
support for GSS-APIOui
ability to limit the allowed network senders (syslog ACLs)Oui
support for syslog-transport-tls based framing on syslog/tcp connectionsOui
udp syslogOui
syslog over RELPOui
truly reliable message delivery (Why is plain tcp syslog not reliable?)Oui
on the wire (zlib) message compressionOui
support for receiving messages via reliable RFC 3195 deliveryOui
support for TLS/SSL-protected syslogOui (since 3.19.0)via stunnel
support for IETF's new syslog-protocol draftOui
support for IETF's new syslog-transport-tls draftOui (since 3.19.0 - world's first implementation)
support for IPv6Oui
native ability to send SNMP trapsOui
ability to preserve the original hostname in NAT environments and relay chainsOui
Message Filtering
Filtering for syslog facility and priorityOui
Filtering for hostnameOui
Filtering for applicationOui
Filtering for message contentsOui
Filtering for sending IP addressOui
ability to filter on any other message field not mentioned above (including substrings and the like)Oui
support for complex filters, using full boolean algebra with and/or/not operators and parenthesisOui
Support for reusable filters: specify a filter once and use it in multiple selector lines no
support for arbritrary complex arithmetic and string expressions inside filtersOui
ability to use regular expressions in filtersOui
support for discarding messages based on filtersOui
ability to filter out messages based on sequence of appearingOui (starting with 3.21.3)
powerful BSD-style hostname and program name blocks for easy multi-host supportOui
Supported Database Outputs
MySQLOui (native ommysql, omlibdbi)
PostgreSQLOui (native ompgsql, omlibdbi)
OracleOui (omlibdbi)
SQLiteOui (omlibdbi)
Microsoft SQL (Open TDS)Oui (omlibdbi)
Sybase (Open TDS)Oui (omlibdbi)
Firebird/InterbaseOui (omlibdbi)
IngresOui (omlibdbi)
mSQLOui (omlibdbi)
Enterprise Features
support for on-demand on-disk spooling of messagesOui
ability to limit disk space used by spool filesOui
each action can use its own, independant set of spool filesOui
different sets of spool files can be placed on different diskOui
ability to process spooled messages only during a configured timeframe (e.g. only during off-peak hours, during peak hours they are enqueued only)Oui (can independently be configured for the main queue and each action queue)
ability to configure backup syslog/database serversOui
Professional SupportOui
Config File
config file formatcompatible to legacy syslogd but ugly
ability to include config file from within other config filesOui
ability to include all config files existing in a specific directoryOui
Extensibility
Functionality split in separately loadable modulesOui
Support for third-party input pluginsOui
Support for third-party output pluginsOui
Other Features
ability to generate file names and directories (log targets) dynamicallyOui
control of log output format, including ability to present channel and priority as visible log dataOui
native ability to send mail messagesOui (ommail, introduced in 3.17.0)
good timestamp format control; at a minimum, ISO 8601/RFC 3339 second-resolution UTC zoneOui
ability to reformat message contents and work with substringsOui
support for log files larger than 2gbOui
support for log file size limitation and automatic rollover command executionOui
support for running multiple syslogd instances on a single machineOui
ability to execute shell scripts on received messagesOui
ability to pipe messages to a continously running program
massively multi-threaded for tomorrow's multi-core machinesOui
ability to control repeated line reduction ("last message repeated n times") on a per selector-line basisOui
supports multiple actions per selector/filter conditionOui
web interfacephpLogCon [also works with php-syslog-ng]
using text files as input sourceOui
rate-limiting output actionsOui
discard low-priority messages under system stressOui
flow control (slow down message reception when system is busy)Oui (advanced, multiple ways to slow down inputs depending on individual input capabilities, based on watermarks)
rewriting messagesOui
output data into various formatsOui
ability to control "message repeated n times" generationOui
supported platforms Linux, BSD, anecdotical seen on Solaris; compilation and basic testing done on HP UX
DNS cacheOui
Windows Event Log containers / log files (via separate agent application)
Latest version7.2.6 stable (March 2013)
  • 2013-03-19 19:13:35
    2013-03-20 17:56:58
  • Dévelopement informatique
    English
  • Publique
    Publique
  • Creative Commons License CC-BY-SA 3.0 / GNU FDL