notes blog about

Basics

Sofware for sending and receiving of log messages.

Understands these log formats * RFC 3164 (BSD syslog) * RFC 5424 (IETF syslog) - since v 3.0

Sources

Syntax

source <identifier> { source-driver(params); source-driver(params); ... };

source s_demo_tcp { tcp(ip(10.1.2.3) port(1999)); };

source s_demo_two_drivers {
       tcp(ip(10.1.2.3) port(1999));
       udp(ip(10.1.2.3) port(1999)); };

When receiving messages using the UDP protocol, increase the size of the UDP receive buffer (so_rcvbuf()) on the receiver host (that is, the syslog-ng OSE server or relay receiving the messages).

Troubleshooting

Possible causes of losing log messages (latest version)

Statistics

syslog-ng-ctl stats

Resources