<p dir="ltr">Hmm, I dont know that option, maybe the premium edition team added that and it trickled into the open source documentation. Iirc by default syslog-ng made sure compression happens within tls as long as the other party supports it.</p>
<p dir="ltr">Or you want to disable it?</p>
<div class="gmail_quote">On Aug 12, 2016 20:15, <<a href="mailto:thejaguar@tutanota.de">thejaguar@tutanota.de</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<p>Hi all,</p>
<p>According to this <a href="https://www.balabit.com/documents/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html/tlsoptions.html" target="_blank">https://www.balabit.com/<wbr>documents/syslog-ng-ose-<wbr>latest-guides/en/syslog-ng-<wbr>ose-guide-admin/html/<wbr>tlsoptions.html</a></p>
<p>Allow-compression() should be a working option under tls.</p>
<p>I did google on this a lot and found no config snippet
which shows allow-compress() to be working and to my surprise when I tried to
include it in my config I get syntax error ______________________________<wbr>_____________________</p>
<p> </p>
<p>2016-08-11T15:27:19.538347] Registering candidate plugin;
module='afsocket', context='source', name='systemd-syslog', preference='100'</p>
<p>[2016-08-11T15:27:19.539190] Using /dev/log Unix socket
with systemd is not possible. Changing to systemd-syslog source, which supports
socket activation.; Error parsing afsocket, syntax error, unexpected
LL_IDENTIFIER, expecting ')' in /etc/syslog-ng/syslog-ng.conf at line 27,
column 124:</p>
<p> </p>
<p>destination d_net_tls { network(
"<a href="http://syslog1.xxxxxxxxx.com" target="_blank">syslog1.xxxxxxxxx.com</a>" port(6514) transport("tls") tls(
ca-dir("/etc/syslog-ng/ca") allow-compress(yes)
peer-verify(required-trusted) ssl-options(no-sslv3,no-tlsv1) )</p>
<p> <wbr> <wbr> <wbr> <wbr> <wbr> <wbr> <wbr>
^^^^^^^^^^^^^^ ______________________________<wbr>_____________________</p>
<p>I am using 3.8.0 on
ubuntu 15.10. </p>
<p>Is this even really supported as claimed in here <a href="https://www.balabit.com/network-security/syslog-ng/comparing/detailed" target="_blank">https://www.balabit.com/<wbr>network-security/syslog-ng/<wbr>comparing/detailed</a></p>
<p> </p>
<p># /usr/sbin/syslog-ng -V</p>
<p>syslog-ng 3.8.0beta2</p>
<p>Installer-Version: 3.8.0beta2</p>
<p>Revision: 3.8.0beta2-1</p>
<p>Module-Directory: /usr/lib/syslog-ng/3.8</p>
<p>Module-Path: /usr/lib/syslog-ng/3.8</p>
<p>Available-Modules:
affile,basicfuncs,system-<wbr>source,cryptofuncs,pseudofile,<wbr>afuser,csvparser,linux-kmsg-<wbr>format,confgen,sdjournal,<wbr>syslogformat,afprog,dbparser,<wbr>afsocket</p>
<p>Enable-Debug: off</p>
<p>Enable-GProf: off</p>
<p>Enable-Memtrace: off</p>
<p>Enable-IPv6: on</p>
<p>Enable-Spoof-Source: on</p>
<p>Enable-TCP-Wrapper: on</p>
<p>Enable-Linux-Caps: off</p>
<p> </p><p><br></p><p><br></p> </div>
<br>______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
<br>
<br></blockquote></div>