where log management is heading
Peter is a system engineer working as community manager at BalaBit, the company behind the syslog-ng logging daemon. He helps distributions to maintain the syslog-ng package, follows bug trackers, helps syslog-ng users, and talks regularly at conferences (SCALE, FOSDEM, Libre Software Meeting, LOADays, etc.). In his limited free time he is interested in non-x86 architectures, and works on one of his PPC or ARM machines.
No video of the event yet, sorry!
After 13 years, a new major release of the syslog-ng logging application is available. Syslog-ng 4.0 brings type support and many additional enhancements. This presentation also gives you an overview of some of the larger features since the previous major release, and then proves why type support is a major enhancement, improving both operations and security.
In version 3 and earlier, syslog-ng handled all data as text. Syslog-ng 4 can associate the proper type information with data parsed from log messages using the JSON or PatternDB parsers. You can use type information for comparisons within syslog-ng, and storing data to various destinations, like Elasticsearch or MongoDB. Type support enables more precise filtering and thus real-time security alerting in syslog-ng, and easier searching and reporting in databases. I give a quick overview of the major new syslog-ng features during the version 3 series, including disk-buffer, message parsing, Python support, HTTP destination, Kubernetes support and how these combined with 4.0 features improve both operations and security.
- 2023 May 27 - 13:00
- 45 min
- openSUSE Conference 2023
- New Technologies