syslog-ng 3.4.0beta1 has been released
------------------------------------------------------------------------------ PACKAGE : syslog-ng VERSION : 3.4.0beta1 SUMMARY : new stable release DATE : Dec 15, 2012 ------------------------------------------------------------------------------ DESCRIPTION: A new version of syslog-ng Open Source Edition (3.4.0beta1) has been released. For latest fixes in the 3.4.x feature branch you are recommended to upgrade to this version. CHANGES: 3.4.0beta1 Sat, 15 Dec 2012 02:21:14 +0100 Features: ========= * Added support for the amqp() destination driver, which sends messages to an AMQP queue. * Added support for a new parser named syslog-parser() that can invoke the RFC3164 and RFC5424 parser outside the source driver that received the message. Delaying the syslog parsing can be advantageous in case some preprocessing or filtering needs to take place before the actual syslog parsing. * Added support for dot notation in the $(format-json) template function. * Changed the MongoDB driver to use inserts instead of upserts. * Added support for UNIX domain sockets in the MongoDB driver by using the new path() option. * Added new template functions to perform various cryptographic hash functions on data, like: $(md5), $(md4), $(sha1), $(sha256), $(sha512) * Added a couple of new parsers to db-parser() pattern format: * @PCRE@: use this to parse using a regexp * @EMAIL@: to parse email addresses * @HOSTNAME@: to parse host names * @LLADDR@: to parse link-level addresses, like ethernet MAC addresses * Added the possibility to set TCP keepalive options for TCP based transports: tcp-keepalive-time(), tcp-keepalive-probes(), tcp-keepalive-intvl(). Also added the tcp-keepalive() option as an alias to the earlier so-keepalive() parameter. TCP keepalive became enabled by default. Bugfixes: ========= * Updated with the bugfixes from v3.3.7 * Fixed SQL statement formatting used to create indexes on Oracle. The original query contained an apostrophe when specifying the column name. * Fixed an incorrect validation in the file() source, which caused the entire file to be resent in case syslog-ng was restarted and an encoding() is specified. * Increased the performance when following files with the encoding() option set. Previously, the code to check if the source encoding is fixed size was incorrect, which in turn caused syslog-ng to excercise its slow path when processing these files, instead of a faster alternative. * Fixed a memory leak issue when encoding() is used for file sources and syslog-ng was reloaded. * Fixed a bug in processing the encoding() option for udp() sources. syslog-ng incorrectly propagated the character decoding state from one frame to the next, which might have originated from different senders. * Infinite feedback loops of internal messages triggering another set of internal messages are now detected and suppressed. Earlier it was not safe to enable debug/trace messages during runtime, now it is. * Fixed a race condition in resolving IP address to hostnames, which might have caused garbage in the hostname part of messages. This is most likely mitigated by the DNS cache. Other changes: ============== * Added unit test coverage for various log transport implementations. * Reorganized the LogProto code to support plugins, the transport() option for the syslog() and network() drivers can be used to specify a transport protocol plugin. Credits: ======== syslog-ng is developed as a community project, and as such it relies on volunteers to do the work necessarily to produce syslog-ng. Reporting bugs, testing changes, writing code or simply providing feedback are all important contributions, so please if you are a user of syslog-ng, contribute. These people have helped in this release: Attila Nagy <bra@fsn.hu> Balazs Scheidler <bazsi@balabit.hu> Balint Kovacs <blint@balabit.hu> Brian Kroth <bpkroth@gmail.com> Conrad Hoffmann <ch@bitfehler.net> Csaba Major <csaba.major@balabit.com> Cy Schubert <cy@FreeBSD.org> Eun Kyung <ekyung01@googlemail.com> Evan Rempel <erempel@uvic.ca> Gergely Nagy <algernon@balabit.hu> Jose Oliveira <jpo@di.uminho.pt> Juhasz Viktor <jviktor@balabit.hu> Marvin Nipper <marvin.nipper@stream.com> Michael Hocke <michael.hocke@nyu.edu> Peter Czanik <czanik@balabit.hu> Peter Gyongyosi <gyp@balabit.hu> Sandor Geller <wildy@muhelybt.hu> Sergey <cloun-rulez@yandex.ru> shih dane <daneshih1125@gmail.com> Tamas Pal <folti@balabit.hu> Viktor Juhasz <jviktor@balabit.hu> DOWNLOAD: You can download the source or binary packages from: http://www.balabit.com/network-security/syslog-ng/opensource-logging-system/... The documentation of the syslog-ng Open Source Edition is available in The syslog-ng Open Source Edition Administrator's Guide at http://www.balabit.com/support/documentation/
Hello, On 12/20/2012 10:25 AM, devel@balabit.hu wrote:
A new version of syslog-ng Open Source Edition (3.4.0beta1) has been released. For latest fixes in the 3.4.x feature branch you are recommended to upgrade to this version.
For openSUSE users unofficial pre-compiled binaries are available linked from http://www.balabit.com/network-security/syslog-ng/opensource-logging-system/... There are also packages for the latest SLES 11 SP (not tested, but might also work on earlier SLES releases if /usr is not on separate partition). Please note, that there seems to be a bug when syslog-ng started by systemd (sysvinit is not effected). As a workaround, you can test the new features in the beta by disabling the service (systemctl disable syslog-ng.service) and starting it from the command line. FreeBSD fans can either wait a few days for an updated sysutils/syslog-ng-devel port, or use the attached quick and dirty patch to update the port to beta1. Bye, -- Peter Czanik (CzP) <czanik@balabit.hu> BalaBit IT Security / syslog-ng upstream http://czanik.blogs.balabit.com/
On 12/20/2012 11:27 AM, Peter Czanik wrote:
Hello,
On 12/20/2012 10:25 AM, devel@balabit.hu wrote:
A new version of syslog-ng Open Source Edition (3.4.0beta1) has been released. For latest fixes in the 3.4.x feature branch you are recommended to upgrade to this version.
For openSUSE users unofficial pre-compiled binaries are available linked from http://www.balabit.com/network-security/syslog-ng/opensource-logging-system/... There are also packages for the latest SLES 11 SP (not tested, but might also work on earlier SLES releases if /usr is not on separate partition). Please note, that there seems to be a bug when syslog-ng started by systemd (sysvinit is not effected). As a workaround, you can test the new features in the beta by disabling the service (systemctl disable syslog-ng.service) and starting it from the command line. And it's no more necessary, thanks to Algernon's patch: https://github.com/algernon/syslog-ng/commit/711d1acd9da291e55816c783a8170c3...
Updated packages are being built and will be published in the coming minutes. Bye, -- Peter Czanik (CzP) <czanik@balabit.hu> BalaBit IT Security / syslog-ng upstream http://czanik.blogs.balabit.com/
participants (2)
-
devel@balabit.hu
-
Peter Czanik