<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
Hi,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
Just a heads up that packages for syslog-ng 4.1.0 are also available.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<ul>
<li><span class="ContentPasted0">Debian / Ubuntu packages are available as part of the release:
<a href="https://www.syslog-ng.com/community/b/blog/posts/installing-the-latest-syslog-ng-on-ubuntu-and-other-deb-distributions">
https://www.syslog-ng.com/community/b/blog/posts/installing-the-latest-syslog-ng-on-ubuntu-and-other-deb-distributions</a></span></li><li><span class="ContentPasted0 ContentPasted1">my openSUSE / SLES & fedora / RHEL (&compatible) packages are now ready:
<a href="https://www.syslog-ng.com/community/b/blog/posts/installing-latest-syslog-ng-on-rhel-and-other-rpm-distributions">
https://www.syslog-ng.com/community/b/blog/posts/installing-latest-syslog-ng-on-rhel-and-other-rpm-distributions</a></span></li><li><span class="ContentPasted0 ContentPasted1 ContentPasted2">syslog-ng 4.1.0 will be also available in FreeBSD ports soon. If you are impatient and want to test it, follow the instructions from this blog:
<a href="https://www.syslog-ng.com/community/b/blog/posts/installing-a-syslog-ng-4-development-snapshot-on-freebsd">
https://www.syslog-ng.com/community/b/blog/posts/installing-a-syslog-ng-4-development-snapshot-on-freebsd</a> For the next couple of days it will contain the 4.1.0 release.<br>
</span></li></ul>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted3">
My syslog-ng-stable RPM repos right now contain 3.38: <a href="https://www.syslog-ng.com/community/b/blog/posts/introducing-the-syslog-ng-stable-rpm-repositories">
https://www.syslog-ng.com/community/b/blog/posts/introducing-the-syslog-ng-stable-rpm-repositories</a> If there are no major problems with 4.1.0 I'll update my repos to this version next week or the week after.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted3">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted3">
Peter<br>
</div>
<div class="elementToProof">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<div>
<div>
<div dir="ltr">Peter Czanik (CzP) <peter.czanik@oneidentity.com><br>
Balabit (a OneIdentity company) / syslog-ng upstream<br>
<a href="https://syslog-ng.com/community/" target="_blank">https://syslog-ng.com/<wbr>community/</a><br>
<a href="https://twitter.com/PCzanik" target="_blank">https://twitter.com/PCzanik</a></div>
</div>
</div>
<br>
</div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of László Várady <laszlo.varady@axoflow.com><br>
<b>Sent:</b> Wednesday, March 8, 2023 10:02<br>
<b>To:</b> syslog-ng@lists.balabit.hu <syslog-ng@lists.balabit.hu><br>
<b>Subject:</b> [syslog-ng] syslog-ng 4.1.0</font>
<div> </div>
</div>
<div>
<div style="background-color:#FFEB9C; width:100%; border-style:solid; border-color:#9C6500; border-width:1pt; padding:2pt; font-size:10pt; line-height:12pt; font-family:'Calibri'; color:Black; text-align:left">
<span style="color:#9C6500; font-weight:bold">CAUTION:</span> This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.</div>
<br>
<div>
<div dir="ltr">Dear syslog-ng users,<br>
<br>
<div>We are pleased to announce that the 4.1.0 version of syslog-ng has been released, and it is now available on GitHub:</div>
<div><br>
</div>
<div><a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Freleases%2Ftag%2Fsyslog-ng-4.1.0&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687070650%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=BM8HvarmaLdL1Mu6vMssv3jYiJ0cXTzJ1XhEwGla%2F1w%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.1.0" shash="K82y+Lj6RDiSExpknSdNncYE/n7djOJFACWTee2pRxENo4GrjRQ8b5o8YL1HQRDZq0t8gADkBhiocJXCOERqsgsHdf80qbV09JLdnmh/jKfUibvSHh6KSEISd8HDRq4wwps5U9eP3gVVNK/GkQ0mT5X3tnfEd/GAmsG1tOY/l+k=">https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.1.0</a></div>
<div>
<div class="x_gmail-markdown-body x_gmail-my-3">
<h1>4.1.0</h1>
<h2>Highlights</h2>
<h3>PROXY protocol v2 support (<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4211&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687070650%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=ZgcRJ%2BZGQN3uiK5Fjc4SZ6naLjuYcSgDLIbtVBDIg4w%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4211" shash="gRwXd4j/hI0GdeIFo9X8KcMFe0nuQKhuwTZBP7OdYDe2fCPItPU+tWmJyuE96Pz/iHh+c1t7HaANTh3v8u//LQEF5Emy/fKthq49ticFA+5OhhXX3BOdibMpnxguSsAjCSKcncFym/JV946fWYR9jBRrlR/VyJGSwuAy5tmfitY=">#4211</a>)</h3>
<p>We've added support for PROXY protocol v2 (<code>transport(proxied-tcp)</code>), a protocol<br>
used by network load balancers, such as Amazon Elastic Load Balancer and<br>
HAProxy, to carry original source/destination address information, as described<br>
in <a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.haproxy.org%2Fdownload%2F1.8%2Fdoc%2Fproxy-protocol.txt&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687070650%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=I%2F2tYagU%2BChhkutPh9ELEoHg6DbduCwLJwNn7ZSqSpk%3D&reserved=0" originalsrc="https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt" shash="adFmh8/6S1VOeJ0ylsVfSHTavUcNpCIiLvKzqP7P0ytr6E1GK1cKL0iz5LJolRLht6WoLSFPXl4GgsSvh9V4GjfvAcZbHNoqUjG8pLZ/aEF0Ydt/IFMe9SvvDAupjfk4lOv8oOjjiI3+sT9BOSxgIDk8z9FQ1Ssb3grXAgQi/PM=" rel="nofollow">
https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt</a></p>
<h3>Metrics revised</h3>
<h4>Prometheus metric format (<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4325&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687070650%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=84oJwBSa9nzrvOm2fw1wn%2FeSCYDG08Mz9mVqdJBDDh8%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4325" shash="OcQBvA9IGRhPYhhx8iNm7F5LI/Wz3vOc+HKRoofn8nwk1PefN7ClhDExKBagW/Wx0B6rtcFTsUvKbGE7hGKflZA/fQqT+qgmxbjeUbNa+Vsjz1YCt9cR2Bxeq/emWqxoqTYnKcEtAQ2NYB6dibe0IEz6DT38XYxdgciKLEcdCoE=">#4325</a>)</h4>
<p>A new metric system has been introduced to syslog-ng, where metrics are<br>
identified by names and partitioned by labels, which is similar to the<br>
<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprometheus.io%2Fdocs%2Fconcepts%2Fdata_model%2F&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687070650%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=gE9dYDYS3pgXPghjh%2FBbxMTHD%2FIoxfPbVYevXJYESqA%3D&reserved=0" originalsrc="https://prometheus.io/docs/concepts/data_model/" shash="Wnm7U6zCWXCQZiDRvdy5Vmwso/hLB1zmblGLUBOndNVarNUfC36JbLnsuirKV890UC59iT12GobwNuL8KlSCKDkUBjcPCBi1MtT4fDw2lqtIHh7pUCje6HiSlVExyUXMGcTtq1wuIZHISoEyurYjpwrpzc6yPzsxLu/ix5AEr8Q=" rel="nofollow">Prometheus
data model</a>.</p>
<p>The <code>syslog-ng-ctl stats prometheus</code> command can be used to query syslog-ng<br>
metrics in a format that conforms to the Prometheus text-based exposition<br>
format.</p>
<p><code>syslog-ng-ctl stats prometheus --with-legacy-metrics</code> displays legacy metrics<br>
as well. Legacy metrics do not follow Prometheus' metric and label conventions.</p>
<h4>Classification (metadata-based metrics) (<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4318&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687226888%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=T99ITXkRIqM0DYLj1%2B2LSdljEkCWO%2F%2FosWglSQLfyOc%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4318" shash="co239WtIxE2ZeetVCZ7r5vfoyzTmC3F3xVvglILVZzMf4fheQVur5ihfubO9uUuyYDXwI65yXdmZfp9IYtbt1bfGteXrbN6YxcyW+k8c7+4XqlNLPXvXH5Lh1vhKKhbByZ56OANhsgRfOQO9RgrrHcl6iR66zPXBol7xUotxAng=">#4318</a>)</h4>
<p><code>metrics-probe()</code>, a new parser has also been added, which counts messages<br>
passing through based on the metadata of each message. The parser creates<br>
labeled metrics based on the fields of the message.</p>
<p>Both the key and labels can be set in the config, the values of the labels can<br>
be templated. E.g.:</p>
<div class="x_gmail-snippet-clipboard-content x_gmail-notranslate x_gmail-position-relative x_gmail-overflow-auto">
<pre class="x_gmail-notranslate"><code>parser p_metrics_probe {
metrics-probe(
key("custom_key") # adds "syslogng_" prefix => "syslogng_custom_key"
labels(
"custom_label_name_1" => "foobar"
"custom_label_name_2" => "${.custom.field}"
)
);
};
</code></pre>
</div>
<p>With this config, it creates counters like these:</p>
<div class="x_gmail-snippet-clipboard-content x_gmail-notranslate x_gmail-position-relative x_gmail-overflow-auto">
<pre class="x_gmail-notranslate"><code>syslogng_custom_key{custom_label_name_1="foobar", custom_label_name_2="bar"} 1
syslogng_custom_key{custom_label_name_1="foobar", custom_label_name_2="foo"} 1
syslogng_custom_key{custom_label_name_1="foobar", custom_label_name_2="baz"} 3
</code></pre>
</div>
<p>The minimal config creates counters with the key<br>
<code>syslogng_classified_events_total</code> and labels <code>app</code>, <code>
host</code>, <code>program</code> and<br>
<code>source</code>. E.g.:</p>
<div class="x_gmail-snippet-clipboard-content x_gmail-notranslate x_gmail-position-relative x_gmail-overflow-auto">
<pre class="x_gmail-notranslate"><code>parser p_metrics_probe {
metrics-probe();
};
</code></pre>
</div>
<p>With this config, it creates counters like these:</p>
<div class="x_gmail-snippet-clipboard-content x_gmail-notranslate x_gmail-position-relative x_gmail-overflow-auto">
<pre class="x_gmail-notranslate"><code>syslogng_classified_events_total{app="example-app", host="localhost", program="baz", source="s_local_1"} 3
syslogng_classified_events_total{app="example-app", host="localhost", program="bar", source="s_local_1"} 1
syslogng_classified_events_total{app="example-app", host="localhost", program="foo", source="s_local_1"} 1
</code></pre>
</div>
<h4>Named log paths (path ingress/egress metrics) (<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4344&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687226888%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=NCWLKwk%2BuWP2gC%2FMzz89NEwdLatcho3SAWQm2YVrHGI%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4344" shash="RuasbJNDhux7wO7iBawA0+WeBLnmhTyH0ijttcBGKjPYst6xawau8ufkflIxwErq/qxE5cwPT44KBaQ1xGVDrH8q5535IQgiLXMTbzBUebWS33mCC4ANPirMqwIbYu5HiCnTD2I6vipAUXjIXvwmWjcrt7Ea2iF3VvwRicmRYDI=">#4344</a>)</h4>
<p>It is also possible to create named log paths, for example:</p>
<div class="x_gmail-snippet-clipboard-content x_gmail-notranslate x_gmail-position-relative x_gmail-overflow-auto">
<pre class="x_gmail-notranslate"><code>log top-level {
source(s_local);
log inner-1 {
filter(f_inner_1);
destination(d_local_1);
};
log inner-2 {
filter(f_inner_2);
destination(d_local_2);
};
};
</code></pre>
</div>
<p>Each named log path counts its ingress and egress messages:</p>
<div class="x_gmail-snippet-clipboard-content x_gmail-notranslate x_gmail-position-relative x_gmail-overflow-auto">
<pre class="x_gmail-notranslate"><code>syslogng_log_path_ingress{id="top-level"} 114
syslogng_log_path_ingress{id="inner-1"} 114
syslogng_log_path_ingress{id="inner-2"} 114
syslogng_log_path_egress{id="top-level"} 103
syslogng_log_path_egress{id="inner-1"} 62
syslogng_log_path_egress{id="inner-2"} 41
</code></pre>
</div>
<p>Note that the egress statistics only count the messages which have been have not<br>
been filtered out from the related log path, it does care about whether there<br>
are any destinations in it or that any destination delivers or drops the<br>
message.</p>
<p>The above three features are experimental; the output of <code>stats prometheus</code><br>
(names, labels, etc.) and the metrics created by <code>metrics-probe()</code> and named log<br>
paths may change in the next 2-3 releases.</p>
<h2>Features</h2>
<ul>
<li>
<p><code>$(format-date)</code>: add a new template function to format time and date values</p>
<p><code>$(format-date [options] format-string [timestamp])</code></p>
<p><code>$(format-date)</code> takes a timestamp in the DATETIME representation and<br>
formats it according to an strftime() format string. The DATETIME<br>
representation in syslog-ng is a UNIX timestamp formatted as a decimal<br>
number, with an optional fractional part, where the seconds and the<br>
fraction of seconds are separated by a dot.</p>
<p>If the timestamp argument is missing, the timestamp of the message is<br>
used.</p>
<p>Options:<br>
<code>--time-zone <TZstring></code> -- override timezone of the original timestamp<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4202&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687226888%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=KKQxiYXFOfytkWUfOoNPLnbeOBdeDdr%2F3eIMyQVK1Jo%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4202" shash="yuDl9txjVNowb83fiKJLqKY1TIwGfEBbkgQdQzKbRt1jNLzQeoDbBKOz/mPyzCkEar/PvYqbSfJZ/dIG7EUD3d+XuGYyUn5cJn7BxpLnhH0Gu5Nk119HttaqqrQgq/x1tHQWREbMjEqDbFb6jJXKQpDNLMQiQKa8iw0HptOKAWU=">#4202</a>)</p>
</li><li>
<p><code>syslog-parser()</code> and all syslog related sources: accept unquoted RFC5424<br>
SD-PARAM-VALUEs instead of rejecting them with a parse error.</p>
<p><code>sdata-parser()</code>: this new parser allows you to parse an RFC5424 style<br>
structured data string. It can be used to parse this relatively complex<br>
format separately.<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4281&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687226888%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=guAoDGmykrV1XoGDhLP2kbDgvfPbdPaw75V%2F3Og9myc%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4281" shash="wTHyu9UcUuf2MAKFjuLO3rGEVfJ+2aueWV7HYLCUAiRSgFnpL4DfDF6mI69Dw9JazQ9AnEzeCqPmLR3KHjjCUNjUrL26aWLwH/yNqm/dJp8cFR87Eiikq4FVJsNB3r/6pBtBcE3lkjvBhxQ2UBKyLGLZnR9vG/V+6OCVZxMWQ9U=">#4281</a>)</p>
</li><li>
<p><code>system()</code> source: the <code>system()</code> source was changed on systemd platforms to<br>
fetch journal messages that relate to the current boot only (e.g. similar<br>
to <code>journalctl -fb</code>) and to ignore messages generated in previous boots,<br>
even if those messages were succesfully stored in the journal and were not<br>
picked up by syslog-ng. This change was implemented as the journald access<br>
APIs work incorrectly if time goes backwards across reboots, which is an<br>
increasingly frequent event in virtualized environments and on systems that<br>
lack an RTC. If you want to retain the old behaviour, please bypass the<br>
<code>system()</code> source and use <code>systemd-journal()</code> directly, where this option<br>
can be customized. The change is not tied to <code>@version</code> as we deemed the new<br>
behaviour fixing an actual bug. For more information consult <a class="x_gmail-issue-link x_gmail-js-issue-link" href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fissues%2F2836&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687226888%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=6v67Sofs%2BP%2FpwG3N8C7NGnPifvrkzHvCrFgxhJM2FRs%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/issues/2836" shash="eV5Wk56PjzC3gkZn+jph4gWY9Q4a2dCLFl9o9h/9/acnjGLiNQ9MQjJzrYngyynLDXRwaTUM/G2DMLyfJzzpFZ3w8aEoENV3ilqgvR1wPPBjhkcjiIww5M0NIfTo1ftIhS2Qn1/069HQ9Hvw+GDUcI1Yti91ftPOoSqHAJwkxJ8=">
#2836</a>.</p>
<p><code>systemd-journald()</code> source: add <code>match-boot()</code> and <code>
matches()</code> options to<br>
allow you to constrain the collection of journal records to a subset of what<br>
is in the journal. <code>match-boot()</code> is a yes/no value that allows you to fetch<br>
messages that only relate to the current boot. <code>matches()</code> allows you to<br>
specify one or more filters on journal fields.</p>
<p>Examples:</p>
<div class="x_gmail-snippet-clipboard-content x_gmail-notranslate x_gmail-position-relative x_gmail-overflow-auto">
<pre class="x_gmail-notranslate"><code>source s_journal_current_boot_only {
systemd-source(match-boot(yes));
};
source s_journal_systemd_only {
systemd-source(matches(
"_COMM" => "systemd"
)
);
};
</code></pre>
</div>
<p>(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4245&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687226888%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=%2FFcxZse266vGSiLtw0iQE72cHapzaGqSRUbjpF%2F%2BDr8%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4245" shash="TWnzhuRpQRYZ67bbzGaHGW3HC6YS5VID3FHPIFGUzK4K7aaB92dvDiDc54InvL2Kxrs0roayA0F9jHSSx4TUU7BawUiQbZCXXJMPM2S4EVumnMh3FYBtF4kecCWS20H807wafi6RFUufkQykbOtsbfGvA3nD1qTeeDeMApZ2hho=">#4245</a>)</p>
</li><li>
<p><code>date-parser()</code>: add <code>value()</code> parameter to instruct <code>
date-parser()</code> to store<br>
the resulting timestamp in a name-value pair, instead of changing the<br>
timestamp value of the LogMessage.</p>
<p><code>datetime</code> type representation: typed values in syslog-ng are represented as<br>
strings when stored as a part of a log message. syslog-ng simply remembers<br>
the type it was stored as. Whenever the value is used as a specific type in<br>
a type-aware context where we need the value of the specific type, an<br>
automatic string parsing takes place. This parsing happens for instance<br>
whenever syslog-ng stores a datetime value in MongoDB or when<br>
<code>$(format-date)</code> template function takes a name-value pair as parameter.<br>
The datetime() type has stored its value as the number of milliseconds since<br>
the epoch (1970-01-01 00:00:00 GMT). This has now been enhanced by making<br>
it possible to store timestamps up to nanosecond resolutions along with an<br>
optional timezone offset.</p>
<p><code>$(format-date)</code>: when applied to name-value pairs with the <code>datetime</code> type,<br>
use the timezone offset if one is available.<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4319&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687226888%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=mPc2wYF57pmkKkAzIRRx9ZpE3HMFeSHf7FIY4Tx3L4Y%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4319" shash="tFV8dWf3bsVvY5BIlqnDn3NN0+LlEhDPxt8lZrIcN2/Q/sMIlh/Pq0x2/fhJMawjrMiFoqE65BbjwKlrQ7GuzZqYCILfIpB2+LtU+YGlEOgxO0Gml2QZ2TBRjsqXlJMjXAH1o037km/M8/sLSFslSCCKQtt2gOHnUL7fahGJMpo=">#4319</a>)</p>
</li><li>
<p><code>stats</code>: Added <code>syslog-stats()</code> global <code>stats()</code> group option.</p>
<p>E.g.:</p>
<div class="x_gmail-snippet-clipboard-content x_gmail-notranslate x_gmail-position-relative x_gmail-overflow-auto">
<pre class="x_gmail-notranslate"><code>options {
stats(
syslog-stats(no);
);
};
</code></pre>
</div>
<p>It changes the behavior of counting messages based on different syslog-proto fields,<br>
like <code>SEVERITY</code>, <code>FACILITY</code>, <code>HOST</code>, etc...</p>
<p>Possible values are:</p>
<ul>
<li><code>yes</code> => force enable</li><li><code>no</code> => force disable</li><li><code>auto</code> => let <code>stats(level())</code> decide (old behavior)<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4337&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687226888%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=KDoXaShG5lhsLDaGhhA2buy%2BMBsL0I3evVgaKacFJx4%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4337" shash="OyiI9SO9citPSAsyG5iKH15CH1nJB/xbfk7YC61KSVXJdgTDeTlOvRs0h9TeoWTYg3J9vJrWCHDplQPuUVsTwiA91Lsc7GBEM8YmoZ5EucFvFq3dx/6iioHL/iC1nR/TnqjIs7TStmfaP7BaIM2n9VqxkzMcNFFt14BI8UM6DRM=">#4337</a>)</li></ul>
</li><li>
<p><code>kubernetes</code> source: Added <code>key-delimiter()</code> option.</p>
<p>Some metadata fields can contain <code>.</code>-s in their name. This does not work<br>
with syslog-ng-s macros, which by default use <code>.</code> as a delimiter. The added<br>
<code>key-delimiter()</code> option changes this behavior by storing the parsed<br>
metadata fields with a custom delimiter. In order to reach the fields, the<br>
accessor side has to use the new delimiter format, e.g. <code>--key-delimiter</code><br>
option in <code>$(format-json)</code>.<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4213&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687226888%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=h2Kpo1kHJb0PD5XlXpsS6k57PzyU2Xw6E0xr0XZO38U%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4213" shash="OTC9vTNHG/KnjVnNTHYtYxgdTZBWqk46JuRd2Hik3e7AHLetfHSgHSK6i/msobF/5+YCfypeJgNT4xs5/aKCIcKA4pwzrQnnaGqkqCCa83+6V4xXF7fopSxfdpIB6o4gVoTKkLrM0zpfSgNhTCJ9hZdljJO5GQjF58rCthx6rkU=">#4213</a>)</p>
</li></ul>
<h2>Bugfixes</h2>
<ul>
<li>
<p>Fix conditional evaluation with a dangling filter</p>
<p>We've fixed a bug that caused conditional evaluation (if/else/elif) and certain logpath flags (<code>final</code>,
<code>fallback</code>)<br>
to occasionally malfunction. The issue only happened in certain logpath constructs; examples can be found in the<br>
PR description.<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4058&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687226888%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=E6NHja8M5Bgt7fNvm53wYDzz9%2BR3k%2FYkjaP66YpsoBY%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4058" shash="aAWOLZZeVt3cSjUNIUvuK+xHqzJPVahTaiPctjUaWOGjcbxajNJQI3nKxCUUlNicmdDSWYGiUVQXlAoQExlGrozGrrzdF2PWg9r6CRW+7sf/v8cDl/nPysmYJc/tCCMjzBSuBv/YMtTxxCqMoTp0L7BIs6iuKjoKwO64D8WEgIw=">#4058</a>)</p>
</li><li>
<p><code>python</code>: Fixed a bug, where <code>PYTHONPATH</code> was ignored with
<code>python3.11</code>.<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4298&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687226888%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=RxBigHGLDjNlaPF9O7SkuLFHePvK8JVildw%2FZQRplQI%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4298" shash="ka4vgD2EgyCWeYsm/6iT1+utpzcTvuvp1CWG0X6Gm9rhQv2wpmTOHTwh8Ipg0q1pwsz35Q6iPvtG3MSB6tfKa2fKjBOHl4Jvb1vIYXUUk7RQ9RN1hMATOowzxVpY8k+p+tuFpNqM3UfNs6oAzJHLmR1/zDlMqFTq0G319ggssHg=">#4298</a>)</p>
</li><li>
<p><code>disk-buffer</code>: Fixed disk-queue file becoming corrupt when changing
<code>disk-buf-size()</code>.</p>
<p><code>syslog-ng</code> now continues with the originally set <code>disk-buf-size()</code>.<br>
Note that changing the <code>disk-buf-size()</code> of an existing disk-queue was never supported,<br>
but could cause errors, which are fixed now.<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4308&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687226888%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=VLg%2FFA0ZiD0Mll11g1EmNQOprp0JXVCR%2FXvEzolyoss%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4308" shash="r9/oLIdrBIsEpaZuDF0gCvawpiNPBy7+jOq5TEAGZYRY71Aqx5pN50ueMl8ad0KWLRsIHRjBn8udLmmabdeJzPahn5hyUix2LoeZLt57ATdjWSEA/LTznTaRcu24orh+SUI3lnOZH7bmfR6uW+TABkiAL+LlL7W8gBmAtGmvWKU=">#4308</a>)</p>
</li><li>
<p><code>dqtool</code>: fix <code>dqtool assign</code><br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4355&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687226888%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=%2F%2FptptFcCmdfMm9oooh1BNbpyyjgSggCAe1Pf4IbgBA%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4355" shash="ajkxhhsEG+wS08NKJvtgMHiG7mGfI9s+6w5u6KGUbJkVxm4+MzwuosdkIi0COmRroMROwo7TCQron0ZCEm4Not4O77dOYVYkZv1/bsTtl1dvgA2fil4V3nI7dI2GFsQm3k7FT8hy7JHaSaz0JsL8MdF2ACPWR7rcT0qMy4imXI0=">#4355</a>)</p>
</li><li>
<p><code>example-diskq-source</code>: Fixed failing to read the disk-queue content in some cases.<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4308&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687226888%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=VLg%2FFA0ZiD0Mll11g1EmNQOprp0JXVCR%2FXvEzolyoss%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4308" shash="r9/oLIdrBIsEpaZuDF0gCvawpiNPBy7+jOq5TEAGZYRY71Aqx5pN50ueMl8ad0KWLRsIHRjBn8udLmmabdeJzPahn5hyUix2LoeZLt57ATdjWSEA/LTznTaRcu24orh+SUI3lnOZH7bmfR6uW+TABkiAL+LlL7W8gBmAtGmvWKU=">#4308</a>)</p>
</li><li>
<p><code>default-network-drivers()</code>: Added support for the <code>log-iw-size()</code> option with a default value of 1000.<br>
Making it possible to adjust the <code>log-iw-size()</code> for the TCP/TLS based connections, when changing the
<code>max-connections()</code> option.<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4328&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687226888%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=AWgf7IgrZ%2Fx%2Fq7BSK%2FCW1Zf8Zh1gLmG2Bne8SPxxYQc%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4328" shash="bGIp9StwnGEAFVNJ5eGm9U5QGaJqsXe80NMuyG7jSYHKynCKTfn49wFZ7ldC7erun1OGhko4YQA4hk/2bxkehaGJFLAMjqTjy+/KEmFsZYnsxFVRzjkmFAHr9O5PDtWEQOCLD4GU6hlVfFsg/9Bxrt+8XpPLh6akPP9yiq7rSfg=">#4328</a>)</p>
</li><li>
<p><code>apache-accesslog-parser()</code>: fix rawrequest escaping binary characters<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4303&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687226888%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=9O9L5WrHn9q2IPx0reIczsZ3YMhq5lh5KhNsM8wPVdA%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4303" shash="HllXZLdLBIxFuUnQT4BgWwZFBsot+BH0VkeikptcET4hth3e/ciJz9ZUQWX+NjQjGxQSCX+q/R33fXAlb2OMjoVB5a1H8EsfSd6fkUAcDGfWUGmZm2Yw99BDNWrJmQySNsrbCgeoadPqYPQl/yIa4kyiwExoodwgKVFqiv0Mk9c=">#4303</a>)</p>
</li><li>
<p><code>dqtool</code>: Fixed <code>dqtool cat</code> failing to read the content in some cases.<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4308&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687383126%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=HGNQ%2FzOT3kXfP0pvjFo%2BgENwFjOO7FiLqMVk5P2rbdo%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4308" shash="LmwGzNPZaeoxWDICn9eC3Ldt8Zlb2gH5WQvSj73VzPy7GxQGSk6/hz8rAhNakj8iRcUEMHMZfv12nYIOsbPIHD1/6v8jffYp0lCyVF051fQr7MHs7d2I77swx/1SgFOALe2qquX7WhjtMxA00PfdythgIWL7VgSYx4oTfQ5OwZs=">#4308</a>)</p>
</li><li>
<p>Fixed a rare main loop related crash on FreeBSD.<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4262&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687383126%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=3ZYts%2BMGQGY1g6bHrnxSg2ibVCbYJnerSmGbkWMHWXU%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4262" shash="y9/mItuKKZAXmDIC4Rvv9heulIthbgqEJT+dqc6fB6VVK8vgc9KgvbOYui5F9AkOwutrdqwhMi7/Rr+QTQS4OdC+OAypbE0vrtDXm49Fq3M6NLKy9G5cg4bBrOsZgjfZN9EI+kq+EAEhUK+RrZdwnRFBK6bt0RCAZe4EsFjjr7c=">#4262</a>)</p>
</li><li>
<p>Fix a warning message that was displayed incorrectly:<br>
"The actual number of worker threads exceeds the number of threads estimated at startup."<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4282&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687383126%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=e1c2BNE%2F4Qy%2BiNTCrLC%2Bf1kvT04C7oDE9T8lHCE7WiA%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4282" shash="JNFVSsrzoz0yUgxRDSl6sPF9+SHB8Z2yJPTfRw9Uj1KEahb908C1ZfiMPNgHo9/C0UrVWkxWoMRd+1XvAOy0R9ul8iLHYSdWk1unQzKb32zhdcdjW6u72vYon7iStYTnAWILJ/qutjD4i/qRXFqYVpzUw/3zvihLyWXvBpV9NjE=">#4282</a>)</p>
</li><li>
<p>Fix minor memory leak related to tznames<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4334&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687383126%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=cLd7SthOB7HadofNUK4C%2FPGrR2a5vTrZLSUIED7yl0g%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4334" shash="dGMpd9MIguliiU8icU0yDvvGDEgfUzoSsnED6vHcnuKMup3AqawY7xzMqzCV7XpoTFNZynfIfZetVmHkIYu8XsgJMzJFXPAm+zJHRTnMQ2QF/rUD3Cux+Myxu++302riaWHLrfv9dGs9bL66LJmfsIOIWTkck5y5iOEFMP/VhkU=">#4334</a>)</p>
</li></ul>
<h2>Packaging</h2>
<ul>
<li><code>dbparser</code>: libdbparser.so has been renamed to libcorrelation.so.<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4294&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687383126%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=QRN%2FcdC%2Bz1DHL2TtdXMOaAfWuOCrIb3L5UVCn2Dtnk8%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4294" shash="xqEuu1BAjOfNS4jpYi0tCsDd4G1/FHr429YlkWy9ImmFsTxC/NkGn1eZeKDjFlrN7dZ3PQbDOKQKsjEF69DFnwNu2K5ZZdoSoOb2h6+3VPsI9Zji8zrP6oMNjqp6ObPY2vEEKbllywyqasxWH/oeL+wPuq/6VZxLrOofFWcVyXo=">#4294</a>)</li><li><code>systemd-journal</code>: Fixed a linker error, which occurred, when building with
<code>--with-systemd-journal=optional</code>.<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4304&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687383126%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=6GKFiG8HpCSn9i6c4epH975TNz%2Ba3a%2Bf%2BdZ8qjdhw%2F4%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4304" shash="e5mDOiz68D8DtU57FEE9gQl4RguoCSTxSHZVH4Tgp7HXfKEP9ElLLqYh6m88IeloLIDafBz7Jyl/jocPIo3VYhEd4pzVgjbYPRvgo7uczvO8alPqTFO1/j7wAbwZ9wv8xU7it6I0/4PPqdrLt0MRNIs07Qx/ue5ysG/3CGQQ0gQ=">#4304</a>)<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4302&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687383126%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=HAhXvfpRgw1XdUxiIRPYZdLpt7gvE7X5eo7YXJ9ExTE%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4302" shash="JRa2o0vO7fRkjL1YVemoY4ofjCVipPsmXyUK4eKAidWGffwkYiqOXvAwHm039mVHbAVAyKrD5uLOgukucqYeElvW+vOIysLJP3nhNgJ6jYUVKiODZWZAzmnpICanNIF9aSMejR3xUR42ZcF0wPtYGSkCRb4Ix1rJdcYPyVKj7uQ=">#4302</a>)</li></ul>
<h2>Notes to developers</h2>
<ul>
<li><code>LogThreadedSourceDriver</code> and <code>Fetcher</code>: implement source-side batching<br>
support on the input path by assigning a thread_id to dynamically spawned<br>
input threads (e.g. those spawned by LogThreadedSourceDriver) too. To<br>
actually improve performance the source driver should disable automatic<br>
closing of batches by setting <code>auto_close_batches</code> to FALSE and calling<br>
log_threaded_source_close_batch() explicitly.<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F3969&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687383126%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=0Un3lpVrKEpS1CBihx6R61nkWlHKGvO4JseooRYWWr0%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/3969" shash="PsSY8eOUKy/ZyZJaVOFsqQjEefmZLw9xC0M6ZLU1K3yi0xgUMnoWNws6grRfKbhhshgRXgjIlKflbGzS90xNx2Gu7tZq1vx4LQpKPEykaQpVyICRx8MRczouga4Xl+r3Mg734olEqDAETl8QxT2nUt5IVKv7gc+xoGIyndxsNr0=">#3969</a>)</li></ul>
<h2>Other changes</h2>
<ul>
<li>
<p>stats related options: The stats related options have been groupped to a new <code>
stats()</code> block.</p>
<p>This affects the following global options:</p>
<ul>
<li><code>stats-freq()</code></li><li><code>stats-level()</code></li><li><code>stats-lifetime()</code></li><li><code>stats-max-dynamics()</code></li></ul>
<p>These options have been kept for backward compatibility, but they have been deprecated.</p>
<p>Migrating from the old stats options to the new ones looks like this.</p>
<div class="x_gmail-snippet-clipboard-content x_gmail-notranslate x_gmail-position-relative x_gmail-overflow-auto">
<pre class="x_gmail-notranslate"><code>@version: 4.0
options {
stats-freq(1);
stats-level(1);
stats-lifetime(1000);
stats-max-dynamics(10000);
};
</code></pre>
</div>
<div class="x_gmail-snippet-clipboard-content x_gmail-notranslate x_gmail-position-relative x_gmail-overflow-auto">
<pre class="x_gmail-notranslate"><code>@version: 4.1
options {
stats(
freq(1)
level(1)
lifetime(1000)
max-dynamics(10000)
);
};
</code></pre>
</div>
<p><strong>Breaking change</strong><br>
For more than a decade <code>stats()</code> was a deprecated alias to <code>stats-freq()</code>, now it is used as the name<br>
of the new block. If you have been using <code>stats(xy)</code>, use <code>stats(freq(xy))</code> instead.<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4337&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687383126%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=VKQWeR1FJGWrjfk7QnTjFakJH1zPUCVj3rzdCoHivb4%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4337" shash="rJzzUe5AOSnZCiZCztLb6WLd4EyQ/Xy4HBH9j69OwvwXXfDPAq46EcMYcg3u4HeijKYWoY/wsFRVb2dldoW+cGZEP6L5n90e9wMuIn2J7KdILo9LOj++XSVQD2onWS88ELPn5/Y/FwS9FK2aiXyJGPja3QgyMpNjgHvlaCgrwXU=">#4337</a>)</p>
</li><li>
<p><code>kubernetes</code> source: Improved error logging, when the pod was unreachable through the python API.<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4305&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687383126%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=yhLvJzM%2F4J6gcYq2or4o2s45BcTAFs4On9QD1S29B20%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4305" shash="pyWnW7xk4UoMsCzblWo+T4AOdxDKIx9v+ejJ9jeYB5Rg4K2E8q8ctAVzu+rOqwBRbHiDDhp2J9WtXbfQ+oQBHbTHzac6amaMurjlPQKzZXNkzRNCYKTi5iT3xVrBNJyfc98ia/fqVeo0na6NPCy+kix/pExVbNJKT7xaCiSQ+ek=">#4305</a>)</p>
</li><li>
<p>APT repository: Added .gz, .xz and .bz2 compression to the Packages file.<br>
(<a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%2Fpull%2F4313&data=05%7C01%7Cpeter.czanik%40oneidentity.com%7C779b9256328945419f2c08db1fb3e207%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C638138629687383126%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=cciFqNSZaownwB1lGWsloW6zGzqglUi0skk8qkcEr%2FQ%3D&reserved=0" originalsrc="https://github.com/syslog-ng/syslog-ng/pull/4313" shash="vf2bJ50AIoTOKwdlVYZq2152fBiDoei2THTiWAK7n6PFTQ264eW3Bisu0QIw+r8KHO5A3nvq78MJaQs9IfqDz/kCGu2StTH0d7Ci4GIHTg8DC4NlxoLQopkfNssrFJ7a8jqpsdZhuURWLrQekfTa0Kfu3eb9UAWMyrXtNCpPdDA=">#4313</a>)</p>
</li></ul>
<h2>Credits</h2>
<p>syslog-ng is developed as a community project, and as such it relies<br>
on volunteers, to do the work necessarily to produce syslog-ng.</p>
<p>Reporting bugs, testing changes, writing code or simply providing<br>
feedback are all important contributions, so please if you are a user<br>
of syslog-ng, contribute.</p>
<p>We would like to thank the following people for their contribution:</p>
<p>Attila Szakacs, Balazs Scheidler, Bálint Horváth, Gergo Ferenc Kovacs,<br>
Hofi, László Várady, Ronny Meeus, Szilard Parrag</p>
</div>
</div>
</div>
</div>
</div>
</body>
</html>