syslog-ng

Download

syslog-ng@lists.balabit.hu

March 2026

2 participants
2 discussions

Syslogd in pfSense Community Edition Firewall version 2.8.1 Stops Sending Firewall Logs to Kiwi Syslog Server Every 7-8 days
by Turritopsis Dohrnii Teo En Ming 31 Mar '26

31 Mar '26

Subject: Syslogd in pfSense Community Edition Firewall version 2.8.1 Stops Sending Firewall Logs to Kiwi Syslog Server Every 7-8 days Good day from Singapore, I have a pfSense Community Edition Firewall version 2.8.1 at home. It is based on FreeBSD 15.0-CURRENT. My firewall hardware appliance has Intel Celeron J4125 CPU, 8 GB RAM and 64 GB of SSD. Now, every 7-8 days, syslogd in my pfsense firewall will stop sending firewall logs to Kiwi Syslog Server. I have already done my due diligence checks. There is nothing wrong with the Kiwi Syslog Server on my Windows 11 Home edition computer. Syslogd in my pfsense firewall will simply stop sending firewall logs to Kiwi Syslog Server every 7-8 days. I have to manually restart syslogd in pfsense firewall before it will send firewall logs to Kiwi Syslog Server again. How can I troubleshoot the problem in such a situation given there are no logging? Thank you in advance for your advice. Regards, Mr. Turritopsis Dohrnii Teo En Ming Extremely Democratic People's Republic of Singapore 31 Mar 2026 Tuesday 11.30 pm Singapore Time

1 0

The syslog-ng Insider 2026-03: 4.11.0 release; OpenSearch; ElasticSearch
by Peter Czanik (pczanik) 11 Mar '26

11 Mar '26

Dear syslog-ng users, This is the 138th issue of syslog-ng Insider, a monthly newsletter that brings you syslog-ng-related news. NEWS Version 4.11.0 of syslog-ng is now available Version 4.11.0 of syslog-ng is now available. The main attraction is the brand new Kafka source, but there are many other smaller features and improvements, as well. https://www.syslog-ng.com/community/b/blog/posts/version-4-11-0-of-syslog-n… Using OpenSearch data streams in syslog-ng Recently, one of our power users contributed OpenSearch data streams support to syslog-ng, which reminded me to also do some minimal testing on the latest OpenSearch release with syslog-ng. TL;DR: both worked just fine. https://www.syslog-ng.com/community/b/blog/posts/using-opensearch-data-stre…<https://www.syslog-ng.com/community/b/blog/posts/using-the-blank-filter-of-…> Changes in the syslog-ng Elasticsearch destination While testing the latest Elasticsearch release with syslog-ng, I realized that there was already a not fully documented elasticsearch-datastream() driver. Instead of fixing the docs, I reworked the elasticsearch-http() destination to support data streams. So, what was the problem? The driver follows a different logic in multiple places than the base elasticsearch-http() destination driver. Some of the descriptions were too general, others were missing completely. You had to read the configuration file in the syslog-ng configuration library (SCL) to configure the destination properly. While preparing for syslog-ng 4.11.0, the OpenSearch destination received a change that allows support for data streams. I applied these changes to the elasticsearch-http() destination, and did a small compatibility change along the way, so old configurations and samples from blogs work. https://www.syslog-ng.com/community/b/blog/posts/changes-in-the-syslog-ng-e… WEBINARS * You can learn about upcoming webinars and browse recordings of past webinars at https://www.syslog-ng.com/events/ Your feedback and news, or tips about the next issue are welcome. To read this newsletter online, visit: https://syslog-ng.com/blog/ Peter Czanik (CzP) <peter.czanik(a)oneidentity.com> One Identity (Balabit) / syslog-ng upstream https://syslog-ng.com/community/ https://twitter.com/PCzanik

1 0