[syslog-ng] Insider 2022-06: 3.37; hardware; Apache; disk-buffer;
Peter Czanik (pczanik)
Peter.Czanik at oneidentity.com
Thu Jun 16 10:06:57 UTC 2022
Dear syslog-ng users,
This is the 102nd issue of syslog-ng Insider, a monthly newsletter that brings you syslog-ng-related news.
NEWS
syslog-ng 3.37 released
-----------------------
Balázs Scheidler, founder of the syslog-ng project, describes the latest syslog-ng release:
“syslog-ng 3.37 has just been released, packages available in various platforms this week. You can get the detailed release notes on the github releases page, however I felt this would be a good opportunity to revisit my draft on the syslog-ng long term objectives and how this release builds in that direction.”
Read the rest of the blog at https://syslog-ng-future.blog/syslog-ng-3-37-released/
When (not) to use the syslog-ng disk-buffer
-------------------------------------------
The syslog-ng disk buffer is one of the most often used syslog-ng options to ensure message delivery. However, it is not always necessary and using the safest variant has serious performance impacts. If you utilize disk-buffer in your syslog-ng configuration, it is worth to make sure that you use a recent syslog-ng version.
>From this blog, you can learn when to use the disk-buffer option, the main differences between reliable and non-reliable disk-buffer, and why is it worth to use the latest syslog-ng version.
https://www.syslog-ng.com/community/b/blog/posts/when-not-to-use-the-syslog-ng-disk-buffer
Hardware for a syslog-ng server
-------------------------------
What hardware to use for a syslog-ng server? It is a frequent question with no definite answer. It depends on many factors: the number and type of sources, the number of logs, the way logs are processed, and so on. My experience is that for the majority users even a Raspberry Pi would be enough. But of course, not for everyone.
https://www.syslog-ng.com/community/b/blog/posts/hardware-for-a-syslog-ng-server
Analyzing Apache HTTPD logs in syslog-ng
----------------------------------------
Recently, I started my own blog, and as Google Analytics seems to miss a good part of visitors, I wanted to analyze my web server logs myself. I use syslog-ng to read Apache logs, process them, and store them to Elasticsearch. Along the way, I resolve the IP address using a Python parser, analyze the Agent field of the logs, and also use GeoIP to locate the user on the map.
>From this blog, you can learn how I built my configuration. Note that once I was ready, I realized that my configuration is not GDPR compliant, so I also show you which parts to remove from the final configuration :-).
https://www.syslog-ng.com/community/b/blog/posts/analyzing-apache-httpd-logs-in-syslog-ng
WEBINARS
* Register for our latest webinars at https://www.syslog-ng.com/event/syslogng-webcast-series-2022/
* You can browse recordings of past webinars at https://www.syslog-ng.com/events/
Your feedback and news, or tips about the next issue are welcome. To read this newsletter online, visit: https://syslog-ng.com/blog/
Peter Czanik (CzP) <peter.czanik at oneidentity.com>
Balabit (a OneIdentity company) / syslog-ng upstream
https://syslog-ng.com/community/
https://twitter.com/PCzanik
More information about the syslog-ng
mailing list