Welcome to Rsyslog¶
Rsyslog is a rocket-fast system for log processing. It offers high-performance, great security features and a modular design. While it started as a regular syslogd, rsyslog has evolved into a kind of swiss army knife of logging, being able to
- accept inputs from a wide variety of sources,
- transform them,
- and output the results to diverse destinations.
Rsyslog has a strong enterprise focus but also scales down to small systems. It supports, among others, MySQL, PostgreSQL, failover log destinations, ElasticSearch, syslog/tcp transport, fine grain output format control, high precision timestamps, queued operations and the ability to filter on any message part.
- Configuration Formats
- sysklogd format
- Basic Structure
- rsyslog Properties
- The Property Replacer
- Filter Conditions
- Legacy Configuration Directives
- rsyslog statistic counter
- Output Channels
- Dropping privileges in rsyslog
- Notes on IPv6 Handling in Rsyslog
- libgcrypt Log Crypto Provider (gcry)
- Dynamic Stats
- Lookup Tables
- rsyslog and containers
- Example Use Cases
- Encrypting Syslog Traffic with TLS (SSL)
- Encrypting Syslog Traffic with TLS (SSL) [short version]
- Writing syslog messages to MySQL, PostgreSQL or any other supported Database
- Handling a massive syslog database insert rate with Rsyslog
- Reliable Forwarding of syslog Messages with Rsyslog
- Recording the Priority of Syslog Messages
- Failover Syslog Server
- Log rotation with rsyslog
- GELF forwarding in rsyslog
- Log Sampling
- Random sampling
- Hash-based Sampling
- Historical Documents
Sponsors and Community¶
Please visit the rsyslog Sponsor’s Page to honor the project sponsors or become one yourself! We are very grateful for any help towards the project goals.
If you like rsyslog, you might want to lend us a helping hand. It doesn’t require a lot of time - even a single mouse click helps. Learn How you can Help.
Contributing to the docs¶
This documentation is hosted on github. If you find something to be improved, please feel free to fork and file a patch request with your improvements. There is also a Button ‘Edit in GitHub’ on every documentation page beginning with the main docs page that allows easy access.
Help with configuring/using