------------------------------------------------------------------------------ PACKAGE : syslog-ng Premium Edition VERSION : 4 F2 (4.2.1) SUMMARY : New syslog-ng Premium Edition feature release DATE : Feb 20, 2012 ------------------------------------------------------------------------------ Dear syslog-ng Premium Edition Users, A new feature version of the syslog-ng Premium Edition (PE) has been released. The main new features of syslog-ng Premium Edition 4 F2 (4.2.1) are briefly summarized below: WARNING New license required for multi-CPU operation Note that version 4 F2 of syslog-ng Premium Edition includes multi-threaded processing with a 2 CPU core limit. If you are upgrading your syslog-ng PE server from version 4.1 to 4.2 and your syslog-ng PE deployment requires more than 2 CPU cores, you will need to obtain a new license file, free of charge, from the BalaBit sales department. Reliable disk-based buffering * Reliable disk-based buffering is now available in syslog-ng PE. Use reliable disk-based buffering if you do not want to lose logs in case of reload/restart, unreachable destination or syslog-ng PE crash. This solution provides a slower, but reliable disk-buffer option. The disk-buffer file is created and initialized at startup and gradually grows as new messages arrive. Collecting messages from tables or relational database * Starting with version 4 F2, the syslog-ng PE application is able to collect messages from tables or relational database, using the sql() driver. Currently the Microsoft SQL (MSSQL), MySQL, Oracle and PostgreSQL databases are supported. The syslog-ng PE application can connect to a database, collect records from a table and then create a message from each record. Every query executed by the SQL source can be customized. Reliable Log Transfer Protocol * The syslog-ng application can send and receive log messages in a reliable way over the TCP transport layer using the Reliable Log Transfer Protocol (RLTP). RLTP is a new transport protocol that prevents message loss during connection breaks. It detects the last received message on the receiving end and then starts resending messages from that point. Therefore, messages are not duplicated at the receiving end in case of a connection break. It also allows the negotiation of using TLS with a single source driver. New hard macro: Unique receipt ID * A unique ID for messages generated at reception time on the receiving host. It facilitates defining relationships between messages that are potentially distributed to different files on the same host, or different hosts. Installation path in .RUN installer * The syslog-ng PE application can be installed to an alternative location. It can be useful if the user intends to install syslog-ng PE without registering it as a service, or if it cannot be installed to the default location because of policy compliance reasons. Other changes * Starting with version 4 F2, lgstool cat and lgstool tail --filter option is available. * From 4 F2, syslog-ng PE will limit the number of processors/cores used by syslog-ng PE. It is limited in the license file, through the Max-Processors entry. If you are upgrading your syslog-ng server from version 4.1 to 4.2 and your syslog-ng deployment requires more than 2 CPU cores, you will need to obtain a new license file, free of charge, from the BalaBit sales department. Please contact the sales department at sales@balabit.com * AIX 7.1 has been added to the list of supported platforms Fixed issues: #25840: invalid frame header sent by syslog-ng #24459: Possible segmentation fault in case of a partial write in file destinations #24385: Throttle is not working in tcp destination if disk-buffer is used #25724: The -Q command line option of the syslog-ng binary is functional again #24544: Fixed rewrite rule evaluation in case they were referenced from multiple locations #25578: Fixed a syslog-ng deadlock in case of failed SQL transactions For details on the fixed issues see our new issue tracking page at https://www.balabit.com/mybalabit/fixed_bugs/revision/syslog-ng%204.2.1 The documentation of syslog-ng Premium Edition 4 F2, is available in PDF, HTML, and single-page HTML format at: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/supp... UPGRADE: For details on upgrading and possible upgrade paths, read Section Upgrading syslog-ng in the The syslog-ng Premium Edition 4 F2 Administrator Guide: http://www.balabit.com/sites/default/files/documents/syslog-ng-pe-4.2-guides... DOWNLOAD: Download the latest binaries from: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/supp... Note that to download the binaries, you have to login into your MyBalaBit account. Kind Regards, BalaBit IT Security