[syslog-ng] syslog-ng OSE 3.2beta1 has been released (source + binaries)

Balazs Scheidler bazsi at balabit.hu
Sat Oct 16 14:45:25 CEST 2010


Dear syslog-ng users,

I'm happy to announce that an important milestone towards the new
syslog-ng release has been reached.

syslog-ng OSE 3.2beta1 has been uploaded to our website. It contains a
lot of important new functionality compared to 3.2alpha2 and also some
care has been taken to shake out release-critical bugs.

As of know I don't know about any Release Critical issues, but I do now
that a number of such bugs have been fixed since alpha2. So if you had
issues with the alpha release and didn't report the issues, it still is
probable that this release fixes them.

I think this beta is good enough for everyone to try out, so if you like
the new features, I'd appreciate if you could report with either
negative or positive feedback to the syslog-ng mailing list. 

If you haven't tracked 3.2 development so far, I'd recommend to read the
3.2alpha2 and 3.2beta1 announcements for a sumary of new features coming
in 3.2.

You can find these here:

http://www.balabit.com/downloads/files/syslog-ng/open-source-edition/3.2alpha2/changelog-en.txt
http://www.balabit.com/downloads/files/syslog-ng/open-source-edition/3.2beta1/changelog-en.txt

This time in addition to the source code, I also release syslog-ng
binaries for Linux/i386 and Linux/amd64. The binaries are not
thouroughly tested and will probably never be. The canonical release
format for syslog-ng is the source code. Anyway, if you feel there are
problems with the installer/binaries, feedback is welcome, we're willing
to fix them.

Here's the NEWS entry for the 3.2beta1 release:

3.2beta1
        Mon, 11 Oct 2010 12:25:07 +0200

        Changes and new features destined to the syslog-ng 3.2 release are
        complete, and starting with this release, only bugfixes and minor
        changes are possible. There's only one exception to this: the
        correllation framework in db-parser() is still considered
        experimental and is recommended for early adopters only.

        This beta has gone through some testing and initial blocker problems
        were fixed before the release. Right now I'm not aware of any
        serious issues, but as always, testing is appreciated.

        New features since 3.2alpha2:
        * Added support for message correllation in db-parser. See the
          relevant blog posts for more information:

          http://bazsi.blogs.balabit.com/2010/10/syslog-ng-correllation-updated/
          http://bazsi.blogs.balabit.com/2010/09/syslog-ng-correllation/

        * Added "pdbtool patternize", which implements automatic patterndb
          generation from a sample log file.

          http://gyp.blogs.balabit.com/2010/01/introducing-pdbtool-patternize/ 

        * Added template functions framework and some initial functions:

          http://bazsi.blogs.balabit.com/2010/09/introducing-template-functions/

          The new functions are: $(echo), $(grep) and $(if)

        * Added support to process native syslog.conf file using the
          syslogconf SCL plugin.

          http://bazsi.blogs.balabit.com/2010/09/syslog-ng-now-supports-the-syslog-conf-file-format/

        * Added support for comparison operators in filter expressions, e.g.
          it is now possible to use "$FACILITY_NUM" < "5". String and
          numeric operators are also provided, the same way as in perl.

        * syslog-ng now automatically detects if an incoming message is in
          RFC3164 or RFC5424 format. This means that the syslog driver can
          be used to process both.

        * Added pdbtool validation support, using the "pdbtool test --validate". 
          Requires an installed xmllint program.

        * pdbtool is now able to merge patterndb XML files recursively in
          order to make it easy to use the results of the patterndb project.

        * db-parser() automatically assigns class-specific tags to messages,
          this means that a message classified "system" will get a
          ".classifier.system" tag in addition to storing the class in a
          name-value pair named ${.classifier.class}

        * It is now possible to use multiple program name patterns for a
          single ruleset in patterndb.

        * Added $(ipv4-to-int) template function to convert an IP address to
          its numeric representation.

        Bugfixes since 3.2alpha2:
        * Fixed a possible infinite loop in "pdbtool test" in case
          program/message was missing from the sample message.

        * SQL: revert don't require the current CVS version of libdbi

        * Don't report "this config file version is too old" multiple times.

        * Underscore and dash are assumed to be equivalent in plugin names.

        * Various memory leaks were plugged.

        Removed functions:
        * Removed the use_time_recvd() global and per-destination option,
          deprecated since 3.0. Can be substituted with $R_ prefix in macro
          names.

        Other changes:
        * Restructured the source tree in order to make compilations of
          independent plugins easier and faster. Modules go to modules/
          subdirectory, the core lives under lib/ and the main executables
          go into syslog-ng/

        * SCL paths are determined relative to ${datadir} instead of
          ${prefix} to make distribution packaging easier.

        * Pass -avoid-version when linking modules.

        * syslog-ng now requires bison 2.4, this is also checked by the
          configure script.

Credits:

I'd like to thank the following people who made this release possible. 
People in no particular order:
	* Péter Gyöngyösi for his patternize work
	* Márton Illés for pdbtool test
	* Róbert Fekete for his feedback on various functions/ideas
	* Csaba Major for listening to my stupid ideas :)
	* Martin Grauel for giving a talk on syslog-ng 3.2 and for his 
	  number of useful comments
	* Bálint Kovács for trying patternize, giving me bugreports 
	  and for his patternize related ideas
	* Péter Czanik for asking distributor maintainers to package 
	  syslog-ng 3.2 and to return feedback on the build process
	* Matthew Hall, Martin Holste, Patrick H. for his patterndb 
	  feedback and their support on the mailing that gave me time to 
	  work on syslog-ng instead of doing syslog-ng related mailing

Hopefully I haven't forgotten anyone. I'd like to open the 3.3 branch 
of syslog-ng now and I'd appreciate if distributions would start adopting 
the 3.2 package. It comes with big build changes, so maintainers
please expect some more time with this release.

I'm trying to fix bugs fast as they appear to get a stable 3.2 by 
the end of this year.

Happy logging!

-- 
Bazsi




More information about the syslog-ng mailing list