March 2012 - syslog-ng-announce

syslog-ng Premium Edition 4 F2 (4.2.2) has been released
by devel＠balabit.hu 22 Mar '12

22 Mar '12

------------------------------------------------------------------------------ PACKAGE : syslog-ng Premium Edition VERSION : 4 F2 (4.2.2) SUMMARY : New syslog-ng Premium Edition feature release DATE : Mar 22, 2012 ------------------------------------------------------------------------------ DESCRIPTION: A new version of syslog-ng Premium Edition 4 F2 (4 F2 (4.2.2)) has been released. For latest fixes in the 4 F2 (4.2.x) branch you are recommended to upgrade to this version. CHANGES: 4 F2 (4.2.2) Thu, 22 Mar 2012 14:08:00 +0200 New features: * Starting with version 4 F2 (4.2.2), on-the-wire compression can be enabled in TLS-encrypted communication to reduce the bandwidth usage of transporting log messages. Note that this option must be enabled both on the server and the client side to have any effect. Enabling compression can significantly reduce the bandwidth required to transport the messages, but can slightly decrease the performance of syslog-ng PE, reducing the number of transferred messages. Fixed issues: #26029: syslog-ng crashes when pipe destination receives an EAGAIN signal #25972: Using a CSV parser in multiple logpaths does not have effect #26127: syslog-ng is leaking file descriptors #26128: The syslog-ng server leaks memory after closing many TLS connections #26077: SQL destination with an empty indexes() option causes syslog-ng to crash after reload For details on the fixed issues see our new issue tracking page at https://www.balabit.com/mybalabit/fixed_bugs/revision/ DOWNLOAD: Download the latest binaries from: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Note that to download the binaries, you have to login into your MyBalaBit account. The documentation of the syslog-ng application is available in The syslog-ng Premium Edition 4 F2 (4.2.2) Administrator Guide at: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Kind Regards, BalaBit IT Security

1 0

syslog-ng Premium Edition 4 LTS (4.0.5) has been released
by devel＠balabit.hu 12 Mar '12

12 Mar '12

------------------------------------------------------------------------------ PACKAGE : syslog-ng Premium Edition VERSION : 4 LTS (4.0.5) SUMMARY : new stable release DATE : Mar 9, 2012 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Premium Edition (4 LTS (4.0.5)) has been released. For a full description on stable and feature releases, see Section 2.16. Stable and feature releases of syslog-ng PE in The syslog-ng Premium Edition 4 LTS (4.0.5) Administrator Guide. CHANGES: 4 LTS (4.0.5) Fri, 09 Mar 2012 13:26:48 +0100 Fixed issues: #25577: Fixed a syslog-ng deadlock in case of failed SQL transactions #24425: In rare cases, syslog-ng crashes on Solaris #24546: Memory leak when reading from disk buffer #24210: The lgstool tail command fails with an error message #22763: The trusted-keys() option is ignored if the value was not an SHA1 key #23297: SQL: messages lost from FIFO when reloading syslog-ng #23308: SQL: When shutting down syslog-ng, messages from FIFO are lost #23110: Debug logs of syslog-ng include every modification of the log messages #23176: syslog-ng removes the PRI value if it is 0 #23409: Reading from files using the wildcard file source is slow #25963: syslog-ng does not start if the persist file is invalid #23114: A single log message is not sent using TLS, two messages are required #23418: Losing messages when flow-control is enabled #23555: syslog-ng crashes when the pad_size() is longer than the message #22636: The unix-stream and dgram drivers duplicate messages in some cases #25956: syslog-ng stops processing messages when the timestamping server is slow #25978: Receiving messages from obsolete network sources causes a segfault #25979: Rewrite: Attempting to rewrite a read-only field overwrites the MESSAGE field #25995: When reloading the configuration is not successful, syslog-ng can duplicate log messages #22693: In some cases the disk buffer file becomes unreadable #24580: If the flush_timeout() is low, the throttle option is not working for file destinations CHANGES: Deadlock detection: * The supervisor process of syslog-ng can automatically check if syslog-ng entered a deadlock and does not respond. If the syslog-ng process does not respond, the supervisor process restarts syslog-ng. By default, the supervisor process checks for timeouts every 300 seconds. To modify this value, use the '--deadlock-check-timeout' or '-D' command-line option of syslog-ng For details on the fixed issues see our new issue tracking page at https://www.balabit.com/mybalabit/fixed_bugs/revision/ The documentation of syslog-ng 4 LTS, including the installation and user guides is available in PDF, HTML, and single-page HTML format at: http://www.balabit.com/support/documentation/ UPGRADE: For details on upgrading and possible upgrade paths, read Section 3.5., Upgrading syslog-ng in the The syslog-ng Premium Edition 4 LTS Administrator Guide: http://www.balabit.com/support/documentation/syslog-ng-pe-v4.0-guide-admin-… Kind Regards, BalaBit IT Security DOWNLOAD: Download the latest binaries from: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/upg… Note that to download the binaries, you have to login into your MyBalaBit account. The documentation of the syslog-ng application is available in The syslog-ng Premium Edition 4 LTS (4.0.5) Administrator Guide at: http://www.balabit.com/support/documentation/

1 0

syslog-ng 3.4.0alpha1 has been released
by devel＠balabit.hu 11 Mar '12

11 Mar '12

------------------------------------------------------------------------------ PACKAGE : syslog-ng VERSION : 3.4.0alpha1 SUMMARY : new stable release DATE : Mar 11, 2012 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Open Source Edition (3.4.0alpha1) has been released. This is an alpha release aiming at collecting feedback and testing on the upcoming 3.4 version. Use in production environments is not recommended. CHANGES: 3.4.0alpha1 Features: ========= * Support for junctions & channels were added, which improve the flexibility of the syslog-ng configuration language. This allows combining sources with their closely tied processing functionality (like parser, rewrite and filter statements). Read this blog post for more information: http://bazsi.blogs.balabit.com/2012/01/syslog-ng-flexibility-improvements/ In the final form of the functionality the "log" keyword as described in the blog post above was replaced with "channel". * The functionality to query and manipulate sets of name-value pairs (often referenced as value-pairs and used in the mongodb() destination driver and the $(format-json) template function). got significantly improved. It is now possible to change the name of the keys when creating the output. See this commit for more information: https://github.com/bazsi/syslog-ng-3.4/commit/ddc7c2539bd66fa35e8df441e4baf… * Plugins & modules are now demand-loaded automatically if the "autoload-compiled-modules" global variable is set to 1, which is the default. Any shared libraries found on the module search path is considered for loading if the configuration file contains a reference to a functionality it provides. To disable this functionality simply set the referenced variable to 0 with a "@define" statement and load modules explicitly via "@module" statements. To list the available plugins & modules, use the --module-registry command line option for syslog-ng, which results in a detailed listing. * Added a new parser named json-parser() to parse incoming JSON formatted messages. See this commit for more information: https://github.com/bazsi/syslog-ng-3.4/commit/e5569687bba2551c89a78faee55bc… * Added a number of template functions: $(length ARG) - length of a template expression $(substr ARG START [LEN]) - substring of a string $(strip ARG) - remove white space from the start and end $(sanitize ARG1 ARG2) - join args to form a filename while removing special characters like '/' $(+), $(-), $(*), $(/), $(%) - perform numeric operations * Added support for replicasets to the mongodb() destination driver. https://github.com/bazsi/syslog-ng-3.4/commit/a980b9d268efa54879d3deeb4a53f… * Added support for safe-mode() to the mongodb() destination driver that ensures inserts were properly executed at the cost of some performance penalties. https://github.com/bazsi/syslog-ng-3.4/commit/768f0c6ec8eba2ad51531f2331fb5… * Added support for SMTP destination to send out emails triggered by log messages. https://github.com/bazsi/syslog-ng-3.4/commit/404ceb959efe9715ce7437d7dcdc2… * Added support for generating UUIDs via the $(uuid) template function. https://github.com/bazsi/syslog-ng-3.4/commit/a16798c653c057239236945034114… * Added the @SET@ parser to db-parser(). https://github.com/bazsi/syslog-ng-3.4/commit/ab08c84abbeda5a200b8150a6af7b… * Added support for dbd-option() in the sql() destination driver that makes it possible to supply driver specific options to the DBI driver. https://github.com/bazsi/syslog-ng-3.4/commit/9254fe9e6236746bf1f955f0cac12… * Reload of the configuration can now be triggered using "syslog-ng-ctl reload". * A new macro named $LOGHOST was added, which expands to the local hostname running syslog-ng. * A set of time macros were added prefixed with "C_" that use the current time instead of the reception time (prefixed R_) and and the time that was included in the message (prefixed S_). This means that C_DATE expands to the current date, whereas R_DATE would expand to the date the current message was received at. https://github.com/bazsi/syslog-ng-3.4/commit/c2d17009e2ce14960acb519750fe2… * Improved error reporting by including the configuration-file location of the object associated with the error. This makes it easier to diagnose errors even in the case of otherwise unnamed objects. * This release also includes all fixes of the 3.3 branch, which are not listed here for brevity's sake. The merged commit ID is: bf742b0, which is a couple of patches ahead of "3.3.4". Credits: ======== syslog-ng is developed as a community project, and as such it relies on volunteers to do the work necessarily to produce syslog-ng. Reporting bugs, testing changes, writing code or simply providing feedback are all important contributions, so please if you are a user of syslog-ng, contribute. These people have helped in this release: Andreas Piesk Balazs Scheidler (BalaBit) Balint Kovacs (BalaBit) Evan Rempel (University of Victoria) Gergely Nagy (BalaBit) Heiko Gerstung Hendrik Völker (Verizon) Jakub Jankowski (superhost.pl) Martin Grauel (BalaBit) Matthias Runge (Fedora) Patrick Hemmer Russ Milne (Seccuris) DOWNLOAD: You can download the source or binary packages from: http://www.balabit.com/network-security/syslog-ng/opensource-logging-system… The documentation of the syslog-ng Open Source Edition is available in The syslog-ng Open Source Edition Administrator's Guide at http://www.balabit.com/support/documentation/

1 0