[syslog-ng] Insider 2017-01: syslog-ng 3.9.1; SearchGuard; FOSDEM & SCALE;

[Czanik, Péter]

Dear syslog-ng users,

This is the 54th issue of syslog-ng Insider, a monthly newsletter that
brings you syslog-ng-related news.



NEWS



syslog-ng 3.9.1 has been released

------------------------

Right before Christmas syslog-ng version 3.9.1 has been released, four
months after the 3.8.1 release. It contains tons of bugfixes and many
small incremental changes compared to the previous version.
Performance has been improved at multiple places, Big Data drivers
were updated, and secure logging to Elasticsearch is now possible
using SearchGuard. For a complete list, read
https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.9.1
where you can also find the source code .tgz file.

For binary packages check https://syslog-ng.org/3rd-party-binaries/



Securing Elasticsearch access with SearchGuard

----------------------------------------------

Using syslog-ng to index events to your Elasticsearch cluster has been
possible natively for some time now. Readabout using Search Guard
support in syslog-ng 3.9 to encrypt and authenticate your connections
to Elasticsearch.

https://www.balabit.com/blog/securing-your-esk-stack-for-free-using-search-guard/



Installing the latest syslog-ng DEB packages

--------------------------------------------

The syslog-ng application is part of all major Linux distributions,
and you can usually install syslog-ng from the official repositories.
However, if you want to use the features of newer syslog-ng versions
(for example, send log messages to Elasticsearch or Apache Kafka), you
have to either compile the syslog-ng from source, or install it from
unofficial repositories. This post explains you how to do that on DEB
packages based systems:

https://www.balabit.com/blog/installing-the-latest-syslog-ng-on-ubuntu-and-other-deb-distributions/



RPM packages from syslog-ng git HEAD

------------------------------------

There are some situations, when even the latest stable release is not
good enough as a bug was found and fixed after release. Or maybe you
want to check the latest new features that are not yet available in a
release. If you use an RPM-based distribution, packages generated from
Git HEAD are right for you:

https://www.balabit.com/blog/rpm-packages-from-syslog-ng-git-head/



UPCOMING EVENTS



Peter Czanik will give two talks at FOSDEM (http://fosdem.org/):

- Scaling your logging infrastructure:
https://fosdem.org/2017/schedule/event/syslog_ng_scaling/

- Getting the most out of your security logs:
https://fosdem.org/2017/schedule/event/syslog_ng_using/



Balabit will participate the Southern California Linux Expo this year
again: http://www.socallinuxexpo.org/scale/15x You can talk to our
engineers at the Balabit booth and listen to Peter Czanik about
syslog-ng.



NEW RELEASES



- syslog-ng 3.9.1: https://www.balabit.com/blog/syslog-ng-3-9-1-released/





Your feedback and news, or tips about the next issue are welcome at
documentation at balabit.com. To read this newsletter online, visit:
https://syslog-ng.org/

Peter Czanik (CzP) <peter.czanik at balabit.com>
Balabit / syslog-ng upstream
https://www.balabit.com/blog/author/peterczanik/
https://twitter.com/PCzanik