rsyslog¶
rsyslog is a high-performance, modular logging framework designed for both traditional syslog workloads and modern log processing pipelines. It supports flexible routing, advanced filtering, structured logging, and integrations with modern observability tools such as Elasticsearch, Kafka, and cloud-based systems.
rsyslog is widely used as the default logging daemon on Linux systems and scales from embedded environments to large enterprise deployments. Its modular design enables you to collect, transform, and reliably deliver logs to a wide variety of destinations.
Start Here: - Getting Started - Configuration Basics - Troubleshooting - Tutorials
- Getting Started with rsyslog
- Configuration
- Output Modules
- Input Modules
- Parser Modules
- Message Modification Modules
- String Generator Modules
- Library Modules
- Basic Structure
- Templates
- rsyslog Properties
- The Property Replacer
- Filter Conditions
- RainerScript
- Actions
- Input
- Parser
- timezone
- Examples
- Legacy Configuration Directives
- rsyslog statistic counter
- Modules
- Output Channels
- Dropping privileges in rsyslog
- Notes on IPv6 Handling in Rsyslog
- libgcrypt Log Crypto Provider (gcry)
- libossl Log Crypto Provider (ossl)
- Dynamic Stats
- Lookup Tables
- Percentile Stats
- Converting older formats to
advanced
- Configuration Formats
- sysklogd format
- Additional Resources
- Compatibility Note
- FAQ
- Tutorials
- Encrypting Syslog Traffic with TLS (SSL)
- Encrypting Syslog Traffic with TLS (SSL) [short version]
- Writing syslog messages to MariaDB, MySQL, PostgreSQL or any other supported Database
- Handling a massive syslog database insert rate with Rsyslog
- Reliable Forwarding of syslog Messages with Rsyslog
- Recording the Priority of Syslog Messages
- Failover Syslog Server
- Log rotation with rsyslog
- GELF forwarding in rsyslog
- Log Sampling
- Random sampling
- Hash-based Sampling
- Troubleshooting
- Concepts
- Development
- Reference
Community and Sponsors¶
See the Sponsor’s Page for details on project sponsors and how to support ongoing development.
Want to help? See How you can Help.
Contributing to Documentation¶
This documentation is hosted on GitHub. Use the “Edit in GitHub” button on any page to suggest improvements.
Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project
Contributing: Source & docs: rsyslog source project
© 2008–2025 Rainer Gerhards and others. Licensed under the Apache License 2.0.