Chat now with support
Chat with Support

syslog-ng Store Box 5.1.0 - Release Notes

syslog-ng Store Box 5.1

syslog-ng Store Box 5.1

Release Notes

August 2018

These release notes provide information about the syslog-ng Store Box release.


About this release

Welcome to syslog-ng Store Box. This document describes what is new in the latest version of syslog-ng Store Box (SSB).

Upgrade to the new release

This is a Feature Release, which means that it will be supported for 6 months after the original publication date and for 2 months after a succeeding Feature or LTS Release is published (whichever date is later). Note that only the last of the feature releases is supported - for example, when a new feature release comes out, the last one becomes unsupported.

For a full description on stable and feature releases, open the SSB product page on the Support Portal and navigate to Product Life Cycle & Policies > Product Support Policies > Software Product Support Lifecycle Policy.

Prerequisites and notes


SNMP destinations and SQL sources to be removed in upcoming feature release

Do not upgrade to SSB 5 F1 if you are currently using and want to continue to use:

  • SNMP destinations
  • SQL sources

These functionalities are planned to be removed from SSB starting with version 5 F2. Upgrading from 5 LTS to 5 F1 would mean that you would have to upgrade to 5 F2 once it has been released - to continue to receive support for the product.

Staying on 5 LTS means that you will not have access to the HDFS destination functionality available in SSB starting with version 5 F1, however, you will continue to get support for 3 years after the original publication date of 5 LTS (December 2017) and for 1 year after the next LTS release is published (whichever date is later).

If you wish to carry on using SNMP destinations and SQL sources, contact


Pyramid hardware is not supported

SSB 5 LTS is not supported on the following hardware: SSB N1000, SSB N1000d, SSB N5000, SSB N10000.

In case you have SSB deployed on other, newer hardware or you have SSB 4 LTS, those will not be affected in any way. The version policy applies to those. For details, open the SSB product page on the Support Portal and navigate to Product Life Cycle & Policies > Product Support Policies > Software Product Support Lifecycle Policy.

If you wish to take advantage of new features and remain supported beyond the end date of the Extended Support phase, you need to upgrade your hardware. For assistance with your hardware upgrade, contact our Sales Team. For further inquiries, contact our Support Team.

If you do not know the type of your hardware or when it was purchased, complete the following steps:

  1. Login to SSB.

  2. Navigate to Basic Settings > Troubleshooting > System debug, click Collect and save current system state info, and save the file.

  3. Open a ticket at

  4. Attach the file you downloaded from SSB in Step 1.

  5. We will check the type of your hardware and notify you.

How to upgrade

For step-by-step instructions on upgrading to 5 F1, see Upgrade Guide at the Safeguard for Privileged Sessions Documentation page.

New features

HDFS destination

It is now possible to forward log messages from SSB to Hadoop Distributed File System (HDFS) servers, allowing you to store your log data on a distributed, scalable file system. This is especially useful if you have huge amounts of log messages that would be difficult to store otherwise, or if you want to process your messages using Hadoop tools.

For more information, see "Forwarding log messages to HDFS destinations" in the Administration Guide.

Resolved issues

The following is a list of issues addressed in this release.

Table 1: General resolved issues
Resolved Issue Issue ID

Unstable indexing under high load

Unresponsive indexer processes are killed and restarted by syslog-ng, and this could cause the unwanted restart of an indexer under high load. We have improved the responsiveness of the indexer in this situation.


syslog-ng crash

A regression inSSB 5.0.2 could cause a syslog-ng crash in certain situations. This has been fixed.


Core dumps cannot be removed on the web interface

The option to remove core dumps was missing from the Basic Settings > Troubleshooting page of the web interface. This has been fixed.


syslog-ng memory consumption issues

The size of syslog-ng's output buffers has been automatically calculated since SSB 4.9. In certain configurations, this could cause syslog-ng to use up all the memory in the system for buffering logs. The method of calculation has been rewritten to achieve a better balance between resource consumption and performance.

Table 2: Security package updates
Resolved Issue Issue ID

Security package updates

Self Service Tools
Knowledge Base
Notifications & Alerts
Product Support
Software Downloads
Technical Documentation
User Forums
Video Tutorials
RSS Feed
Contact Us
Licensing Assistance
Technical Support
View All
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating