New template function: filter()

From version 3.30, the syslog-ng OSE application supports using the filter() template function, which runs the filter expression on each element of a given list, and returns only those list elements that meet the requirements of the filter expression.

New option for systemd-journal() source: namespace()

From version 3.30, the syslog-ng OSE application supports using the namespace() option for the systemd-journal() source, which works exactly the same way as the respective option of the Journalctl command line tool.

Local timezone STD format supported for %z format element in date-parser()

From version 3.30, the syslog-ng OSE application supports using the local timezone STD format for the %z format element of date-parser().

New parser: panos-parser()

From version 3.29, the syslog-ng OSE application supports the panos-parser() parser as SCL.

New PCRE flag: dupnames

From version 3.29, the syslog-ng OSE application supports using the dupnames flag to be used in PCRE expressions, allowing duplicate names for named subpatterns.

Support for the proxy() option in HTTP-based destinations

From version 3.28, the syslog-ng OSE application supports using the proxy() option in HTTP-based destinations.

New template function: map()

From version 3.28, the syslog-ng OSE application supports the map() template function.

Load balancing support

From syslog-ng OSE version 3.28, you can load balance your logs between multiple destinations.

New destinations: sumologic-http() and sumologic-syslog()

From version 3.27, the syslog-ng OSE application can send logs to Sumo Logic through the sumologic-http() and sumologic-syslog() destinations.

New rewrite function: set-facility()

From version 3.27, the syslog-ng OSE application supports using the set-facility() rewrite function to change the syslog facility associated with the message.

New parameter: ca-dir()

From syslog-ng OSE version 3.27, you can use the ca-dir() parameter for the tls() option for the network() source to set a bundled CA-file for peer-verification.

New macros

From syslog-ng OSE version 3.27, three new macros are available:

• $DESTIP

• $DESTPORT

• $PROTO

Arrow syntax support (Java and Python options)

From version 3.27, syslog-ng OSE supports the "arrow" syntax for declaring custom Python and Java options in your configuration.