Skip to content


Subversion checkout URL

You can clone with
Download ZIP
syslog-ng is an enhanced log daemon, supporting a wide range of input and output methods: syslog, unstructured text, queueing, SQL & NoSQL.
C Python C++ Shell Objective-C D Other

Preparations for 3.4.8

NEWS & VERSION updated for syslog-ng 3.4.8.

Signed-off-by: Gergely Nagy <>
latest commit 1ac6692eec
@algernon algernon authored
Failed to load latest commit information.
build build/ Touch the output of the lexer rules
contrib contrib/upstart/: Fix a typo in the service file
debian Copyright fixups
lib value-pairs: the key option of value-pairs is expanded to macros
libtest libtest: Use AM_CPPFLAGS instead of AM_CFLAGS
m4 Makefiles: check if -Wno-pointer-sign is available as an option for gcc
modules json: Fix the format-json test
scl scl/ Make sure the installed SCLs are user-rwable
scripts create install directories with mkinstalldirs instead of mkdir -p
syslog-ng syslog-ng-ctl: Fix the linking with modern libtool
tests value-pairs: adding sdata to the syslog-proto (RFC5424) scope
tgz2build tgz2build/rules: disable amqp and rabbitmq from the build
.gitignore .gitignore: replace config.* pattern with more concrete ones
.gitmodules afamqp: New AMQP destination driver
.travis.yml .travis.yml: Update for the new branch structure
AUTHORS added implementation of new time related macros
GPL.txt relicense syslog-ng to a combination of GPL/LGPL
INSTALL make dynamic linking the default
LGPL.txt Major copyright & license fixups Clean up properly at distclean
NEWS Preparations for 3.4.8 Various improvements
VERSION Preparations for 3.4.8 Enforce https URLs Teach it about bison >= 3 added dist.conf and added automatic substitution of some dynamic vari… Don't install the ChangeLog


syslog-ng is an enhanced log daemon, supporting a wide range of input and output methods: syslog, unstructured text, message queues, databases (SQL and NoSQL alike) and more.

Key features:

  • receive and send RFC3164 and RFC5424 style syslog messages
  • work with any kind of unstructured data
  • receive and send JSON formatted messages
  • classify and structure logs with builtin parsers (csv-parser(), db-parser(), ...)
  • normalize, crunch and process logs as they flow through the system
  • hand on messages for further processing using message queues (like AMQP), files or databases (like PostgreSQL or MongoDB).


  • syslog-ng provides performance levels comparable to a large cluster while running on a single node.
  • In the simplest use-case it scales up 600-800k messages per second.
  • But classification, parsing and filtering still produces several tens of thousands messages per second.

Installation from Source

Releases are tagged in the github repository and tarballs ready to compile are made available at BalaBit's syslog-ng tarball repository.

To compile from source, the usuall drill applies (assuming you have the required dependencies):

$ ./configure && make && make install

Some of the functionality is compiled only in case the required development libraries are present. The configure script displays a summary of enabled features at the end of its run.

Installation from Binaries

Binaries are available in various Linux distributions and contributors maintain packages of the latest and greatest syslog-ng version for various OSes.


Simply invoke the following command as root:

# apt-get install syslog-ng

Latest versions of syslog-ng are available for a wide range of Debian and Ubuntu releases and architectures from an unofficial repository.


syslog-ng is available as a Fedora package that you can install using yum:

# yum install syslog-ng


Binaries for other platforms might be available, please check out the official third party page for more information.

Something went wrong with that request. Please try again.