[syslog-ng] Insider 2018-04: RHEL6; Windows Event Log; Patched RPM; HEC; Conferences;

Czanik, Péter peter.czanik at balabit.com
Thu Apr 12 09:56:58 UTC 2018

Dear syslog-ng users,

This is the 66th issue of syslog-ng Insider, a monthly newsletter that
brings you syslog-ng-related news.


syslog-ng is available for RHEL 6 / CentOS 6 again

After more than a year, the latest version of syslog-ng compiles again
on Red Hat Enterprise Linux version 6. This is thanks to a patch from
Balázs Scheidler which resolves compatibility problems with older glib
releases by implementing the missing functions within syslog-ng.


Agentless Windows logging

With syslog-ng Premium Edition, you can collect Windows event logs
without installing any third-party application on your Windows-based

Learn more about it from our blog at
or join our webinar where you can also ask questions:

Build your own syslog-ng RPM

When a user reports a problem with syslog-ng, developers create code
to fix it. The fix is called a patch or a pull request (PR) in Git
terminology. Often this code does not enter the main source code
automatically but developers ask the user to test the fix before the
code is merged. A new challenge starts here: figuring out how to test
a proposed fix. This blog shows you how to download and patch the
syslog-ng source code and build easy-to-install (and remove) RPM
packages from it.


While this blog introduces you to package building in depth, a lot
simpler method is also available for Ubuntu packages and should be
working soon again for RHEL / CentOS as well:


Sending logs to Splunk HEC

Recently Splunk started to recommend the use of the HTTP Event
Collector (HEC) instead of forwarders. syslog-ng supports this in
multiple ways. In a previous blog, we showed you how to use the http()
destination of syslog-ng. This time, we introduce you to another
possibility: using an external python script to send logs to HEC.

Read our blog at
or watch the webinar at

Conferences: CentOS Dojo, FOSDEM and SCALE

Recently syslog-ng was presented at some popular open source
conferences. Read about the presentations and experiences in related

CentOS Dojo & FOSDEM: https://syslog-ng.com/blog/centos-dojo-fosdem-2018/

SCALE: https://syslog-ng.com/blog/syslog-ng-scale-2018/


LOADays: http://loadays.org/ (Antwerp)

Red Hat Summit: https://www.redhat.com/en/summit/2018 (San Francisco)

Your feedback and news, or tips about the next issue are welcome at
documentation at balabit.com. To read this newsletter online, visit:

Peter Czanik (CzP) <peter.czanik at balabit.com>
Balabit / syslog-ng upstream

More information about the syslog-ng mailing list