Welcome to Rsyslog¶
Rsyslog is a rocket-fast system for log processing. It offers high-performance, great security features and a modular design. While it started as a regular syslogd, rsyslog has evolved into a kind of swiss army knife of logging, being able to
accept inputs from a wide variety of sources,
and output the results to diverse destinations.
Rsyslog has a strong enterprise focus but also scales down to small systems. It supports, among others, MySQL, PostgreSQL, failover log destinations, ElasticSearch, syslog/tcp transport, fine grain output format control, high precision timestamps, queued operations and the ability to filter on any message part.
- Configuration Formats
- Converting older formats to
- sysklogd format
- Basic Structure
- rsyslog Properties
- The Property Replacer
- Filter Conditions
- Legacy Configuration Directives
- rsyslog statistic counter
- Output Channels
- Dropping privileges in rsyslog
- Notes on IPv6 Handling in Rsyslog
- libgcrypt Log Crypto Provider (gcry)
- Dynamic Stats
- Lookup Tables
- Percentile Stats
- rsyslog and containers
- Example Use Cases
- Encrypting Syslog Traffic with TLS (SSL)
- Encrypting Syslog Traffic with TLS (SSL) [short version]
- Writing syslog messages to MySQL, PostgreSQL or any other supported Database
- Handling a massive syslog database insert rate with Rsyslog
- Reliable Forwarding of syslog Messages with Rsyslog
- Recording the Priority of Syslog Messages
- Failover Syslog Server
- Log rotation with rsyslog
- GELF forwarding in rsyslog
- Log Sampling
- Random sampling
- Hash-based Sampling
- Historical Documents
Sponsors and Community¶
Please visit the rsyslog Sponsor’s Page to honor the project sponsors or become one yourself! We are very grateful for any help towards the project goals.
If you like rsyslog, you might want to lend us a helping hand. It doesn’t require a lot of time - even a single mouse click helps. Learn How you can Help.
Contributing to the docs¶
This documentation is hosted on github. If you find something to be improved, please feel free to fork and file a patch request with your improvements. There is also a Button ‘Edit in GitHub’ on every documentation page beginning with the main docs page that allows easy access.
Help with configuring/using
Mailing list - best route for general questions
GitHub: rsyslog source project - detailed questions, reporting issues that are believed to be bugs with
Stack Exchange (View, Ask) - experimental support from rsyslog community
Source project: rsyslog project README.
Documentation: rsyslog-doc project README
Copyright 2008-2020 Rainer Gerhards (Großrinderfeld), and Others.