------------------------------------------------------------------------------
PACKAGE : syslog-ng Premium Edition
VERSION : 4 F2 (4.2.1)
SUMMARY : New syslog-ng Premium Edition feature release
DATE : Feb 20, 2012
------------------------------------------------------------------------------
Dear syslog-ng Premium Edition Users,
A new feature version of the syslog-ng Premium Edition (PE) has been
released.
The main new features of syslog-ng Premium Edition 4 F2 (4.2.1) are
briefly summarized below:
WARNING
New license required for multi-CPU operation
Note that version 4 F2 of syslog-ng Premium Edition includes
multi-threaded processing with a 2 CPU core limit. If you are upgrading your
syslog-ng PE server from version 4.1 to 4.2 and your syslog-ng PE deployment
requires more than 2 CPU cores, you will need to obtain a new license file,
free of charge, from the BalaBit sales department.
Reliable disk-based buffering
* Reliable disk-based buffering is now available in syslog-ng PE. Use reliable
disk-based buffering if you do not want to lose logs in case of
reload/restart, unreachable destination or syslog-ng PE crash. This solution
provides a slower, but reliable disk-buffer option. The disk-buffer file is
created and initialized at startup and gradually grows as new messages
arrive.
Collecting messages from tables or relational database
* Starting with version 4 F2, the syslog-ng PE application is able to collect
messages from tables or relational database, using the sql() driver.
Currently the Microsoft SQL (MSSQL), MySQL, Oracle and PostgreSQL databases
are supported. The syslog-ng PE application can connect to a database,
collect records from a table and then create a message from each record.
Every query executed by the SQL source can be customized.
Reliable Log Transfer Protocol
* The syslog-ng application can send and receive log messages in a reliable
way over the TCP transport layer using the Reliable Log Transfer Protocol
(RLTP). RLTP is a new transport protocol that prevents message loss during
connection breaks. It detects the last received message on the receiving end
and then starts resending messages from that point. Therefore, messages are
not duplicated at the receiving end in case of a connection break. It also
allows the negotiation of using TLS with a single source driver.
New hard macro: Unique receipt ID
* A unique ID for messages generated at reception time on the receiving host.
It facilitates defining relationships between messages that are potentially
distributed to different files on the same host, or different hosts.
Installation path in .RUN installer
* The syslog-ng PE application can be installed to an alternative location.
It can be useful if the user intends to install syslog-ng PE without
registering it as a service, or if it cannot be installed to the default
location because of policy compliance reasons.
Other changes
* Starting with version 4 F2, lgstool cat and lgstool tail --filter option
is available.
* From 4 F2, syslog-ng PE will limit the number of processors/cores used by
syslog-ng PE. It is limited in the license file, through the Max-Processors
entry. If you are upgrading your syslog-ng server from version 4.1 to 4.2
and your syslog-ng deployment requires more than 2 CPU cores, you will need
to obtain a new license file, free of charge, from the BalaBit sales
department. Please contact the sales department at sales(a)balabit.com
* AIX 7.1 has been added to the list of supported platforms
Fixed issues:
#25840: invalid frame header sent by syslog-ng
#24459: Possible segmentation fault in case of a partial write in file
destinations
#24385: Throttle is not working in tcp destination if disk-buffer is used
#25724: The -Q command line option of the syslog-ng binary is functional
again
#24544: Fixed rewrite rule evaluation in case they were referenced from
multiple locations
#25578: Fixed a syslog-ng deadlock in case of failed SQL transactions
For details on the fixed issues see our new issue tracking page at
https://www.balabit.com/mybalabit/fixed_bugs/revision/syslog-ng%204.2.1
The documentation of syslog-ng Premium Edition 4 F2, is
available in PDF, HTML, and single-page HTML format at:
http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup…
UPGRADE:
For details on upgrading and possible upgrade paths, read Section
Upgrading syslog-ng in the The syslog-ng Premium Edition 4 F2 Administrator Guide:
http://www.balabit.com/sites/default/files/documents/syslog-ng-pe-4.2-guide…
DOWNLOAD:
Download the latest binaries from:
http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup…
Note that to download the binaries, you have to login into your MyBalaBit
account.
Kind Regards,
BalaBit IT Security