Chat now with support
Chat with Support

Quest has tools and processes in place to identify, protect, detect, and remediate vulnerabilities and incidents when they occur, including external security partners. As part of our standard security operations, Quest does not use CrowdStrike in any of our operations. We are reviewing our third parties, and so far, there is minimal affect. It is Quest's policy not to provide further technical details unless they directly impact customer data.

syslog-ng Premium Edition 6.0.22 - Administration Guide

Preface Chapter 1. Introduction to syslog-ng Chapter 2. The concepts of syslog-ng Chapter 3. Installing syslog-ng Chapter 4. The syslog-ng PE quick-start guide Chapter 5. The syslog-ng PE configuration file Chapter 6. Collecting log messages — sources and source drivers Chapter 7. Sending and storing log messages — destinations and destination drivers Chapter 8. Routing messages: log paths, reliability, and filters Chapter 9. Global options of syslog-ng PE Chapter 10. TLS-encrypted message transfer Chapter 12.  Reliable Log Transfer Protocol™ Chapter 13. Reliability and minimizing the loss of log messages Chapter 14. Manipulating messages Chapter 15. Parsing and segmenting structured messages Chapter 16. Processing message content with a pattern database Chapter 17. Statistics and metrics of syslog-ng Chapter 18. Multithreading and scaling in syslog-ng PE Chapter 19. Troubleshooting syslog-ng Chapter 20. Best practices and examples

What is new in syslog-ng Premium Edition 6 LTS?

  • For details on the news and highlights of syslog-ng Premium Edition 6 LTS, see the Release Notes.

  • For details on changes in The syslog-ng Premium Edition 6 LTS Administrator Guide, see the section called “Version 5 F3 - 5 F4”.

Who uses syslog-ng?

The syslog-ng application is used worldwide by companies and institutions who collect and manage the logs of several hosts, and want to store them in a centralized, organized way. Using syslog-ng is particularly advantageous for:

  • Internet Service Providers

  • Financial institutions and companies requiring policy compliance

  • Server, web, and application hosting companies

  • Datacenters

  • Wide area network (WAN) operators

  • Server farm administrators.

Public references of syslog-ng Premium Edition

Among others, the following companies decided to use syslog-ng PE in their production environment:

Supported platforms

Version 6.0.20 of the syslog-ng Premium Edition (syslog-ng PE) application is supported on AIX 7.1 for PowerPC.


Chapter 2. The concepts of syslog-ng

Table of Contents

The philosophy of syslog-ng
Logging with syslog-ng
Modes of operation
Client mode
Relay mode
Server mode
Global objects
Timezones and daylight saving
A note on timezones and timestamps
Versions and releases of syslog-ng PE
Licensing
Licensing benefits
Licensing model and modes of operation
Licensing examples
GPL and LGPL licenses
High availability support
The structure of a log message
BSD-syslog or legacy-syslog messages
IETF-syslog messages
Message representation in syslog-ng PE
Structuring macros, metadata, and other value-pairs
Specifying data types in value-pairs
Things to consider when forwarding messages between syslog-ng PE hosts
NFS file system for log files

This chapter discusses the technical concepts of syslog-ng.

The philosophy of syslog-ng

Typically, syslog-ng is used to manage log messages and implement centralized logging, where the aim is to collect the log messages of several devices on a single, central log server. The different devices — called syslog-ng clients — all run syslog-ng, and collect the log messages from the various applications, files, and other sources. The clients send all important log messages to the remote syslog-ng server, which sorts and stores them.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating