I am glad to announce rsyslog 1.12.3. This is a maintenance release offering some improvements in the property replacer, improved Fedora support and minor other things. Probably the biggest news is that rsyslog is now scheduled once again for regular improvements. Over summer, I let "ripen" the rsyslog project and gathered feedback and new ideas. I am now soon to implement the things that came out of this. If you have anything to add, be it a feature request or a comment, please let me know! It is never too late to get your thoughts into rsyslog!

The complete change log for 1.12.3 can be viewed at

http://www.rsyslog.com/Article58.phtml

The download URL is

http://www.rsyslog.com/Downloads-index-req-getit-lid-28.phtml

I hope this release if useful. As always, feedback is appreciated.

Rainer Gerhards

I am glad to announce that rsyslog 1.12.2 has finally been released. This release offers an even smarter message parser that detects more syslog header formats. Unfortunately, there is a large variety in header formatting among the diffent syslogds, and rsyslog now does an even finer job at guessing how the message is formatted. Also, the release contains support for the upcoming IETF syslog-protocol message format standard. As currently no other syslogd supports it, this is more or less a theoretical feature, but eventually it is nice to know we already have it ;) There are also some other changes. The complete change log can be viewed at

http://www.rsyslog.com/Article56.phtml

The download URL is

http://www.rsyslog.com/Downloads-index-req-getit-lid-27.phtml

I hope this release if useful. As always, feedback is appreciated.

Rainer Gerhards

Hi all,

I have just released rsyslog 1.0.4. This is a maintenance release with just a single fix: there were some printfs from the debugging aid left over. They appear each time a message is received via TCP. Obviously, this may cause performance problems on busy systems. Please note that this affects the TCP receiver only, so if you are only using local sockets or UDP, you are not affected by this bug.

The new release can be downloaded form:

http://www.rsyslog.com/Downloads-index-req-getit-lid-26.phtml

I plan to release a new development branch soon, too.

You can also fix your existing 1.0.3 release by removing these lines from syslogd.c:

899: printf("## in loop\n");
917: printf("## record delim found\n");

All the best,
Rainer Gerhards

Hi all,

I just wanted to tell everybody that I am working on a potential memory leak that seems to exist if rsyslog runs on BSD and is compiled to use threading. Unfortunately, the issue is not even easy to reproduce, so I suspect it will take some time to tackle that beast. Anyhow, I thought I let everyone know.

Especially if you notice problems with increasing memory, I would be very interested to hear about that.

Many thanks,
Rainer Gerhards

I am glad to announce rsyslog 1.12.1. This release features a much-enhanced message parser which is capable of better understanding different syslog message formats. For example, BSD syslogd (and others) does not include a host name inside the message. With 1.12.1, an algorithm is used to detect whether or not the hostname is present and the parsed fields are adjusted accordingly. This makes it much easier to integrate rsyslogd into an environment with other syslog senders. Also, threading support for BSD has been completed and a number of bugs have been fixed.

For users of the development branch, I suggest upgrading to this release.

The change log can be found at
    http://www.rsyslog.com/Article51.phtml

The download can be found at
    http://www.rsyslog.com/Downloads-index-req-getit-lid-25.phtml

I hope this work is useful,
Rainer Gerhards

I am pleased to announce rsyslog 1.12.0. Its most prominent feature is support for multi-threading. The new threading approach decouples the receiver part and the action part via an in-memory queue. This design allows to buffer message burts before actions are carried out on them. This dramatically decreases the likelyhood of message loss. Multiple threads are also very important to fully utilize the power of multicore machines.

Threading has been implemented in the least intrusive way possible. However, concurrency is never an easy thing, so multithreading should be considered experimental for the time being. There are known issues with BSD implementations. For this release, it is not recommended to use multithreading on BSD platforms. I will (hopefully) address this in the next release.

Besides multi-threading, rsyslogd has also received a number of fixes, most importantly in the TCP syslog area. If you use TCP syslog, I recommend upgrading to the new released. If you do not want to run the experimental threading code, simply set FEATURE_PTHREADS to 0 in Makefile.

The full change log can be found at
http://www.rsyslog.com/Article47.phtml

The download is available at:
http://www.rsyslog.com/Downloads-index-req-getit-lid-23.phtml

As always, feedback is appreciated.
Rainer Gerhards

Rsyslog 1.11.1 has just been released. The main new feature is support for BSD-style program and hostname blocks. This facilitates rsyslogd usage in multi-host environments and environments migrating from stock BSD syslogd. It is also helpful for any complex logging needs. The release contains some other minor feature enhancements as well bug fixes and stability updates.

Full details can be found in the change log at

http://www.rsyslog.com/Article44.phtml

Due to a problem with the build procedure, a file (rfc3195d.8) was missing in the download set. This has been corrected as of now. I am not releasing a new version. If you experience a problem during "make install", simply download the file once again. Thanks to Bennett Todd for finding this.

Rainer Gerhards

Rsyslog 1.11.0 (development branch) has been released today. This version finally supports the RFC 3195 listener, bringing rsyslog even closer to its initial design goals. The listener supports full RAW and limited COOKED profiles (no relay operations). It is implemented as an optional stand-alone RFC3195-to-local-domain-socket forwarder (named rfc3195d). This allows it to be used with other syslogds, too.

The RFC 3195 listener is a major feature improvement for rsyslog. It is build on liblogging. It should be noted, however, that there still is much room for improvement in rfc3195d.

An implementation of the RFC 3195 sender is still due.

Rainer Gerhards

I am glad to announce rsyslog 1.10.2, the regularly scheduled release. The main improvements are

• ability to limit the systems rsyslogd accepts messages from
  
• new comparison operations for the property-based filters
  

Of course, there are also some other new features as well as some bug fixes.

I recommend upgrading to 1.10.2 if you are running any release of the development branch. Full details can be found in the change log.