Bazsi's blog

Guarding Your Business

Posts Tagged ‘release’

syslog-ng 3.4beta1 released

Friday, December 28, 2012 @ 04:12 PM Author: Balázs Scheidler

Just before christmas I’ve released syslog-ng 3.4.0beta1, hopefully the last before the final release of syslog-ng 3.4. You can find the list of changes since 3.4.0alpha3 here.

Here’s the teaser for those wondering what 3.4 can do for them in addition to 3.3:

  • Junctions, channels and the improved configuration format allows specifying log processing rules at even more flexibility.
  • Full json support by the introduction of json-parser() and enhancements to $(format-json) template function.
  • Support for the amqp() destination that implements support for the AMQP queueing protocol was added.
  • MongoDB improvements to support replicasets, UNIX domain sockets. The performance was also improved by using insert operations instead of upserts.
  • Added support for sending emails via the smtp() destination.
  • Allow huge messages, instead of the old limits of 256k per message and 64k per value limits, the limits are 4GB for both.
  • Added support for parsing the syslog message format after the initial reception. This can be used to “fix” messages before it actually reaches the syslog parser stuff.
  • Native support for systemd.
  • Demand loadable plugins to avoid having to explicitly write “@module” statements. This makes writing syslog-ng.conf files easier.
  • A number of new template functions, like $(uuid), $(hash) and so on.
  • A number of new macros $LOGHOST, $C_DATE and friends.
  • A number of new parsers in db-parser, @PCRE@, @EMAIL@, @SET@, …
  • Added rewrite operations to change message tags.
  • Improved value-pairs expression support that allows specifying

More details can be found in the individual release announcements:

  • 3.4.0alpha1: http://bazsi.blogs.balabit.com/2012/03/first-alpha-release-of-syslog-ng-3-4-published/
  • 3.4.0alpha2: http://lists.balabit.hu/pipermail/syslog-ng/2012-May/018746.html
  • 3.4.0alpha3: http://lists.balabit.hu/pipermail/syslog-ng-announce/2012-June/000144.html

As with all versions of syslog-ng, this wouldn’t have been possible without the help of the syslog-ng community. The role of the community is increasing with release-to-release, larger and larger features are contributed outside BalaBit and the number of contributors is increasing steadily too. I’d like to grab this opportunity to say thanks for everyone involved. Help is welcome and appreciated, be that code, documentation, a description of a use-case or simply just feedback. Thank you.

Stay tuned for the final version!

 

syslog-ng multithreaded performance

Saturday, July 30, 2011 @ 08:07 PM Author: Balázs Scheidler

It seems that the BalaBit syslog-ng team that produces the Premium Edition of syslog-ng has beaten the community project this time, at least in terms of release date.

syslog-ng Premium Edition 4F1 (e.g. the first feature release past 4.0) has been released this week. It is the first release of PE in a long time that is actually based on an actual OSE  core, namely 3.3.

I still have about 100 patches to review and integrate into OSE, hopedully with community involvement. But more about that in an upcoming post.

It is also interesting that some performanc testing was also done, and the new core does pretty well, and scales nicely on an 8 core machine, up to 800k msg/sec in @some onfigurations. Here’s the post the has some more details.

Now,  if only the fixes they did were integrated properly to the OSE repository.  but hey, life would be easy without challenges.

Behind the scenes: syslog-ng 3.3

Monday, June 20, 2011 @ 08:06 PM Author: Balázs Scheidler

I just wanted to let you know, that fixes are nicely coming into the 3.3 beta tree, although it might not be very visible from th outside.

So if you consider trying out 3.3, I’d suggest to try a git snapshot instead of the 3.3beta1 tarball.

I’m trying to release a beta2 or rc1 in the near future. The version number depends on how much feedback we get until then :)

syslog-ng releases

Sunday, January 16, 2011 @ 04:01 PM Author: Balázs Scheidler

I’ve made a round of syslog-ng releases in the last couple of weeks.

From these 3.0.10 and 3.1.4 are quite similar, as they carry the almost the same set of bugfixes, which you can find in the respective changelogs. 3.2.2 is however different, it is a slightly larger update, as the 3.2.x branch of syslog-ng is the most recent. I’m quite happy how the 3.2.x beta period went, as the bugs found since the initial 3.2 release were not at all earthquakes: although they certainly affect some people, those are mainly in the newly introduced functionality (e.g. the correllation engine), the basic functionality of syslog-ng remained quite stable. And considering the size of the 3.1 -> 3.2 update, this is a result on its own.