------------------------------------------------------------------------------ PACKAGE : syslog-ng Premium Edition VERSION : 3.0.3 SUMMARY : new stable release DATE : Nov 13, 2009 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Premium Edition (3.0.3) has been released. For latest fixes in the 3.0.x branch you are recommended to upgrade to this version. NOTE: This is the last release of the syslog-ng Premium Edition 3.0.x branch that contains new features in addition to bugfixes. From now on, 3.0.x releases will be maintenance releases containing only bugfixes; new features will be released in so-called feature releases having 3.x version numbers. For details on the new version and release policy, see http://www.balabit.com/news/334/ CHANGES: IMPORTANT CHANGES: * There was an unintended change in the meaning of command line argument -C (--chroot) and -R (--persist-file) between 2.x and 3.x versions of syslog-ng. This release reverts this change back to the original 2.x behaviour. This is a incompatible change compared against 3.0.2. Please review your startup scripts if you use the -C or -R options. New Features Sources and destinations * A new 'empty-lines' source flag is available to avoid dropping empty log messages. Empty log messages are dropped by default. * Named pipes can be created automatically with the pipe() destination. The filename of the pipes can contain macros as well. * The default priority/facility value of each source can be specified: these default values are applied to messages that do not include priority/facility values. * The default values for SQL columns are being deprecated, please supply SQL schema information explicitly in your SQL destinations. A warning message was added in case you do not have a full schema and rely on the default values. * A new local_time_zone() option has been added to file() and sql() destinations. This option controls the timezone used when expanding the filename/tablename templates. It defaults to the local timezone. Message parsing * Added the "greedy" flags to the csv-parser() which assigns the remaining part of the message to the last column without caring about column separation characters * Added the "drop-invalid" flag to the csv-parser() which makes the parser drop anything that has less columns than expected. Other * The logcat application used to view logstore files has been renamed to lgstool. * The syslog-ng application now integrates better with the default logrotation tools of the various platforms. Previously, certain platforms have not sent a HUP signal to syslog-ng after rotating the log files, causing syslog-ng to write into a temporary file, with the possibility of losing these messages later. This behavior has been corrected: the syslog-ng installer will now create symlinks to receive the HUP signals of the standard logrotation scripts. * To improve the performance of DNS lookups, the dns_cache_hosts file is checked only once per second, not for every DNS lookup. Bugfixes * The frac_digits() option can be used for non-ISO timestamps as well. * Corrections in the init scripts and the rc.d registrations on various platforms. * Performance corrections in the host_override() and program_override() options. * Fixed the handling of door initialization failures on Solaris. * If a file referenced in a file source does not exist, syslog-ng will display an error message in verbose mode. * Using the tcp6() destination caused aborts during startup. This has been corrected. * The usertty() destination now opens the tty in nonblocking mode to avoid blocking on serial lines. * The SOURCEIP macro was not working properly for IPv6 addresses. This has been corrected. * Corrections in the handling of invalid pattern database files. * In certain rare situations, an error in parsing the pattern database file resulted in heap corruption. This has been corrected. * Under high message load, receiving a HUP signal while flow-control was active (not only enabled, but in operation) caused syslog-ng to terminate in certain situations. This has been corrected. * In certain rare situations syslog-ng stopped processing messages, stalling applications logging to syslog and possibly stalling the entire system. This has been corrected. For details, see the public bug report of the error at https://bugzilla.balabit.com/show_bug.cgi?id=48 DOWNLOAD: Download the latest binaries from: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/upgr... Note that to download the binaries, you have to login into your MyBalaBit account. The documentation of the syslog-ng application is available in The syslog-ng 3.0 Administrator Guide at: http://www.balabit.com/support/documentation/?product=syslog-ng&type=all&language[en]=en&