Skip to content
syslog-ng is an enhanced log daemon, supporting a wide range of input and output methods: syslog, unstructured text, queueing, SQL & NoSQL.
C Java Python Shell Yacc Lex Other
Find file
Latest commit dfd5db4 @lbudai lbudai Merge pull request #911 from balabit/f/fix-include-path
make sure all path/dir variables are defined in a single location, by
Failed to load latest commit information.
Mk AC_SUBST() toolsdir instead of doing it in the Makefiles
contrib Merge pull request #757 from pasztor/f/syslog-debun
debian build: use non-recursive automake
doc publish xsddir and PATH_XSDDIR
lib Merge pull request #911 from balabit/f/fix-include-path
libtest logmsg: move the logmessage related sources into a separated directory
m4 Makefiles: fix java version check ('test' has '=', not '==' as operator)
modules Merge pull request #911 from balabit/f/fix-include-path
scl cfg: define scl-root and include-path from the C code
scripts escape glob to avoid weird behaviour when cwd contains .pdb files
syslog-ng-ctl *: use new Copyright (c) Balabit convention
syslog-ng *: use new Copyright (c) Balabit convention
tests copyright: add lib/value-pairs to the policy of the copyright checker
tgz2build syslog-ng: set OpenSSL as a hard dependency
.gitignore warn the user if autoconf-archive is not installed
.gitmodules afmongodb: replaced submodule limongo-client with mongo-c-driver
.travis.yml travis.yml: add --keep-going to make
AUTHORS lib/compat/strcasestr.c: added copyright of origin, extended COPYING … COPYING, updated directory structure and clarified l…
COPYING modules/native: relicensed under the LGPL
GPL.txt relicense syslog-ng to a combination of GPL/LGPL
INSTALL make dynamic linking the default
LGPL.txt Major copyright & license fixups python: make the test_pylib program a shell script Preparations for syslog-ng 3.7.2 Gitter integration added to syslog-ng to make it easier to
VERSION VERSION: bumped to 3.8.0alpha0 configure,,afmongodb/ rename libmongo-client Merge pull request #911 from balabit/f/fix-include-path added dist.conf and added automatic substitution of some dynamic vari…
requirements.txt requirements: update pylint and specify concrete astroid version Makefile: add pkg-config file for syslog-ng-native-connector.a configure: define @config_includedir@ Don't install the ChangeLog
syslog-ng.supp Makefile: add valgrind suppressions

Gitter Build Status Build Status


syslog-ng is an enhanced log daemon, supporting a wide range of input and output methods: syslog, unstructured text, message queues, databases (SQL and NoSQL alike) and more.

Key features:

  • receive and send RFC3164 and RFC5424 style syslog messages
  • work with any kind of unstructured data
  • receive and send JSON formatted messages
  • classify and structure logs with builtin parsers (csv-parser(), db-parser(), ...)
  • normalize, crunch and process logs as they flow through the system
  • hand on messages for further processing using message queues (like AMQP), files or databases (like PostgreSQL or MongoDB).


  • syslog-ng provides performance levels comparable to a large cluster while running on a single node.
  • In the simplest use-case it scales up 600-800k messages per second.
  • But classification, parsing and filtering still produces several tens of thousands messages per second.

Installation from Source

Releases are tagged in the github repository and tarballs ready to compile are made available at BalaBit's syslog-ng tarball repository.

To compile from source, the usual drill applies (assuming you have the required dependencies):

$ ./configure && make && make install

Some of the functionality is compiled only in case the required development libraries are present. The configure script displays a summary of enabled features at the end of its run.

Installation from Binaries

Binaries are available in various Linux distributions and contributors maintain packages of the latest and greatest syslog-ng version for various OSes.


Simply invoke the following command as root:

# apt-get install syslog-ng

Latest versions of syslog-ng are available for a wide range of Debian and Ubuntu releases and architectures from an unofficial repository.


syslog-ng is available as a Fedora package that you can install using yum:

# yum install syslog-ng


Binaries for other platforms might be available, please check out the official third party page for more information.

Something went wrong with that request. Please try again.