[syslog-ng] syslog-ng 3.3.0alpha2 released
Balazs Scheidler
bazsi at balabit.hu
Thu Mar 10 20:17:19 CET 2011
Hi,
I'm happy to announce that I've just uploaded syslog-ng 3.3.0alpha2 to
our website. It contains a couple of important bugfixes and some new
features compared to 3.3.0alpha1.
It worked for me quite well, and it endured the first round of testing
by the BalaBit syslog-ng PE team, when they've started working with the
code.
Highlights
==========
syslog-ng 3.3 has a couple of new and interesting features, already in
this alpha release:
* It uses multiple threads to do its work, thus capable of scaling to
multiple CPUs. Add 'threaded(yes)' to your option block and you're good
to go.
* Built in mongodb destination for folks who prefer NoSQL over
traditional SQL.
* This version has a new and improved "pdbtool patternize"
functionality
More exciting stuff is coming.
Known issues
============
I know for certain that it will not work on FreeBSD unless the following
environment variable is set:
IV_EXCLUDE_POLL_METHOD=kqueue
Otherwise syslog-ng will crash at startup, immediately.
Stability
=========
Certainly you wouldn't want to run your production system on this
version, however this code base had endured a couple of test rounds, so
if it compiles and starts up for you (which can be a challenge I can
admit), then the basic functions will most certainly work.
Changes since 3.3.0alpha1
=========================
3.3.0alpha2
Thu, 10 Mar 2011 12:51:36 +0100
Features:
========
* Support for systemd activation added.
* Add support for customizable token delimiters in "pdbtool
patternize", which makes the resulting patterns to have much
better quality.
* Added support for a --no-parse command line option for "pdbtool
patternize" to avoid parsing the input as normal syslog messages.
* Added a new flag 'ignore-errors' to LogWriter based destinations
(file, pipe, tcp, udp, syslog)
* Added support for specifying the suppress() option globally.
Bugfixes:
=========
* Fixed a tcp()/udp()/syslog() destination driver issue that caused
aborts during startup.
* Handle non-epollable devices like /dev/null normally by failling
back to the regular file-like handling. Earlier these caused an
abort inside ivykis.
* Makefile fixes to make it possible to compile syslog-ng from a
"make dist" tarball.
* Added error messages about libdbi initialization failures, that
would prevent the SQL destination from working.
* Make it possible to compile against PCRE not in a standard
location (caused compilation failures on FreeBSD).
* Fixed several $(grep) related bugs:
- not to cause a segmentation faule when the filter expression
supplied contains syntax errors
- the template parsing code removed quotes required by filter
expressions, with the current change it is possible to use
quotes in the filter expressions directly:
$(grep ('$username' == 'root') $MSG)
- fixed the handling of template function invocations within
correllation that had multiple messages in its context.
* Fixed a segmentation fault in pdbtool match --debug-pattern in
case there was no matching rule.
* Fixed "pdbtool test".
* Added a new macro named $CONTEXT_ID that expands to the current
context-id in correllated rules.
Other changes:
==============
* Changed the default syslog-ng.conf version number to 3.3 to match
the current version.
* The pipe() destination used to override the default value of
flush_lines() by explicitly setting it to 0. This behaviour has
been removed, now the pipe() driver will properly use the default,
unless overridden explicitly.
* Ported the 3.2 linking changes to 3.3, which means that:
- libsyslog-ng-patterndb.so is gone, both the command line pdbtool
command and the patterndb plugin (libpatterndb.so) links its
contents statically, to improve portability on Cygwin.
- unit tests & command line utilities link properly in
--enable-mixed-linking mode
* Added debug messages in the correllation code to make it easier to
debug correllation rules.
* Added debug/verbose options to pdbtool.
Credits:
========
Code, bugreports, testing, documentation suggestions and other
improvements were contributed by:
* Arkadiusz Miśkiewicz (PLD Linux)
* Balazs Scheidler (BalaBit)
* Balint Kovacs (BalaBit)
* Corinna Vinschen (RedHat)
* Dalibor Toman (fortech.cz)
* Gergely Nagy (BalaBit)
* Laszlo Boszormenyi (lsc.hu)
* Marius Tomaschewski (Novell)
* Peter Czanik (BalaBit)
* Peter Gyongyosi (BalaBit)
* Tom Gundersen (jklm.no)
* Valentijn Sessink (blub.net)
* Zoltan Pallagi (BalaBit)
--
Bazsi
More information about the syslog-ng
mailing list