Last week after publishing my Elasticsearch 5 blog, I finally had a little time to take a look at the logs coming from my Turris Omnia router. It is running in a quiet neighborhood of Budapest, but looking at my logs it shows that I’m living in...
The second half of November brought us two exciting new Linux distribution releases: openSUSE Leap 42.2 and Fedora 25. While both of them are based on the RPM packaging format and cover everything from embedded through desktops to servers, there are …
Last week I visited All Things Open, one of the largest open source conferences of the US East Coast. The venue was the monumental building of the Raleigh Convention Center, just two blocks from Red Hat’s headquarters. I was presenting&nbs...
Even if I do not maintain a cluster of FreeBSD servers with thousands of jails anymore, my favorite server operating system is still FreeBSD. I started using it at version 2.X well over twenty years ago. Yesterday, FreeBSD 11.0 was released. For...
Log messages already contain a wealth of information about what is happening in your systems. Still, logs can be enriched with additional information – like the geo-location belonging to an IP address – which can improve the usability of ...
Last Tuesday, I was in London to present syslog-ng at the Linuxing in London meetup. It was my first trip to the UK, so I had some trouble with vehicles driving always on the unexpected side of the road. As it was my first ...
I am happy to announce that after almost a year of development, syslog-ng 3.8.1 has been released. This is the first stable release from the syslog-ng 3.8 branch. Version 3.8.1 adds some long-awaited features to syslog-ng and improves ...
I am pleased to announce our latest long-term supported version of syslog-ng Premium Edition, 6 LTS. In addition to the long-awaited key-value parser, we updated the TLS cipher suite and introduced .NET Framework 4.0 support in the Windows agent...
Almost a year has passed since the last major syslog-ng release. The first beta of the upcoming 3.8 release was published last week. This brought many changes both in terms of new features and in packaging. To encourage testing I would like to highli…
An effective security operations center starts with a reliable tool for securely collecting all logs which are relevant from a security perspective. However, as the size and complexity of the enterprise IT infrastructure increases, the amount of logs…
While most people know syslog-ng as a central syslog server, there is another use, which is less known but most likely has a lot larger installed base. It is syslog-ng embedded. Tens of millions of Kindle e-readers were sold around the world, all of …
Until recently, the correlation and aggregation of information from multiple messages was within the domain of the PatternDB parser. The limitation of this implementation is that it only worked for data extracted by PatternDB. There are now many...