Reasons behind the migration
We have migrated to the official mongo-c-driver binding for providing the MongoDB destination driver in syslog-ng 3.8. Previously in syslog-ng 3.7.x and earlier, libmongo-client provided this binding, mandating its own special syntax.
This change will facilitate future-proof and more fine-grained configuration. MongoDB 3 is not officially supported or being tested yet, but this kind of connection should theoretically enable easy MongoDB 3 support in the future.
What to do when using legacy syntax
If you have used legacy syntax in your configuration file, syslog-ng will substitute the given deprecated options to form a URI. Note that certain aspects of semantics could also differ between the two drivers.
Dear syslog-ng users,
This is the 49th issue of the syslog-ng Insider, a monthly newsletter that brings you syslog-ng-related news. Continue reading
Dear syslog-ng users,
This is the 48th issue of the syslog-ng Insider, a monthly newsletter that brings you syslog-ng-related news. Continue reading
If your organization manages Linux, AIX, HP-UX or Solaris servers in-house, chances are your system administrators at least occasionally need low-level access to those devices. Typically, administrators use some kind of serial console—for example, traditional serial port, Serial-over-LAN or Intelligent Platform Management Interface (IPMI). Managing and auditing console access is not trivial, so many organizations rely on the Conserver application to create session logs when accessing these servers via the serial console. These logs can be useful for various reasons—for example, maintenance or troubleshooting (to review why something crashed), security (to find out who did what—connecting user names to actual users) or compliance (to provide detailed session logs).
This article covers the following:
- How to parse and process serial console logs using syslog-ng Open Source Edition (Balabit).
- How to send the logs to Elasticsearch (Elastic), so you get a complete, searchable audit trail of the console access.
- How to integrate the console logs into a real-time monitoring system using Riemann.
Read more at http://www.linuxjournal.com/content/transferring-conserver-logs-elasticsearch
My previous post described how to build a very simple parser plugin for syslog-ng in Rust. I brought a more realistic example this time: a regular expression based parser plugin. It’s so real that it is decently covered with unit tests and it has even a benchmark.
From time to time, we publish blog posts about syslog-ng and we hope you find them interesting and useful. However, we would like to become better at this: we want to give you more and better content, more regularly. Also, we would like to be transparent about it, and give you the possibility to get involved.
We are glad to inform you that a few days ago the disk-based buffering functionality has appeared in syslog-ng Open Source Edition.
Disk-based buffering can be used for storing messages on the local hard disk if the central log server or the network connection to the server becomes unavailable. The syslog-ng application automatically sends the stored messages to the server when the connection is reestablished.
This year the syslog-ng project would like to participate again in Google Summer of Code.
During the organization registration process we had to answer some questions.
We wanted to share some of our answers to help you understand our plans,
if the syslog-ng project is accepted as a mentoring organization.