[syslog-ng]syslog-ng 1.9.1 released
Balazs Scheidler
bazsi@balabit.hu
Wed, 22 Jan 2003 13:05:43 +0100
Hi,
I have released syslog-ng 1.9.1 which is the first member of the 1.9.x
branch. In this branch syslog-ng is reimplemented from scratch.
Documentation is even more scarce than for syslog-ng 1.5.x so it is
recommended to experienced users only. The program itself is in ALPHA state
which means that it runs seems to work but almost certainly leaks memory.
You can fetch this version by pointing your browser to
http://www.balabit.hu/en/downloads/syslog-ng/downloads/
Backward compatibility was kept where possible, but some minor
incompatibilies might be possible.
Here is the NEWS entry for the never-released 1.9.0 and 1.9.1 which contains
a summary of the new features present in this release.
Feedback is appreciated.
News for the 1.9.1 release
Wed, 22 Jan 2003 12:13:44 +0100
This release is still not intended for production use. It has a good
number of new features and a couple of them may not be stable
enough.
New features:
* template declarations, the possibility to define a template once
and refer to it
* flow controlled log paths work, and they are also configurable
* supports RFC3339 timestamps with second fractions and time zones,
time zone conversion & source time zone specification
* MARK messages are generated
* keep alive for connections as well as listeners
* the ability to follow log files as they are written to
* the possibility to mark parts of a message using standard '(' and
')' regexp operators and refer to matches within templates (either
filenames or content)
This program is still ALPHA.
News for the 1.9.0 release
Thu, 9 May 2002 20:01:11 +0200
This release is the first release of the new reimplementation of
syslog-ng. I moved to using glib instead of libol, as glib is more
mature and provides several nice & easy to use features.
Here's a bunch of nice things about 1.9.0:
* supports flow controlled log paths (still not possible to
configure it, but the code exists in the core)
* better support for macros (macro support is moved out of affile,
thus any other drivers may use it)
* more robust detection of closed destination sockets (a closed
channel is immediately detected, not at the first write) This
avoids losing a log message when the connection is broken.
* supports respawning destination programs (should be used with care
to avoid DoS situations). This makes it easier to integrate third party
extensions to syslog-ng. (SQL backends, on-line log analysis etc)
* performance improvements, instead of using linear lookup in linked
lists, I use hashtables everywhere.
* the ability to define unparsed sources, makes it easier to
integrate things like Apache logs
* many internal reorganizations to make it easier to implement things like
hashed log files, SSL protected TCP sessions and so on.
Things still missing:
* there are some new features with no configuration interface
* internal messages always go to /dev/stderr
* Sun's STREAMS is not yet supported
1.9.0 is currently in an ALPHA state, it's been tested only on my
development computer, and not real-life traffic.
--
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1