syslog-ng.conf(5) The syslog-ng.conf manual page syslog-ng.conf(5) (NAME) syslog-ng.conf - syslog-ng OSE (SYNOPSIS) syslog-ng.conf (DESCRIPTION) . syslog-ng OSE (system logging) . syslog-ng OSE (log messages) . - syslog-ng OSE - syslog-ng OSE . syslog-ng OSE PE . syslog-ng OSE (BASIC CONCEPTS OF syslog-ng OSE) syslog-ng OSE (forward) . syslog-ng OSE . (sources) syslog-ng OSE (destinations) . (log paths) syslog-ng OSE . : . syslog-ng OSE (log statement) . . . syslog-ng OSE . (parsers) (rewriting rules). . syslog-ng OSE (CONFIGURING syslog-ng OSE) o : . syslog-ng OSE (case sensitive). ( statement ) : type-of-the-object identifier-of-the-object {}; o (Type of the object): source destination log filter parser rewrite rule template. o (Identifier of the object): . (\"\") . syslog-ng OSE . : . s_ (source) d_ (destination) . : ( ) @define allow-config-dups 1 . - (Parameters): {parameters}. - (Semicolon): (;) . s_internal . source s_internal { internal(); }; : log { source(s_internal); destination(d_file); }; o C : . option(parameter1, parameter2); option2(parameter1, parameter2); file() : (/var/log/apache/access.log) follow-freq() flags(). follow-freq() flags() . source s_tail { file("/var/log/apache/access.log" follow-freq(1) flags(no-parse, validate-utf8)); }; . (positional) . option(value) . ( ) . . : unix-stream() : . : source s_demo_stream1 { unix-stream("" max-connections(10) group(log)); }; source s_demo_stream2 { unix-stream("" group(log) max-connections(10)); }; o syslog-ng OSE DNS IP . options { use-dns(no); }; o . o (inline) . ( ). o () # . syslog-ng OSE . # Comment: This is a stream source source s_demo_stream { unix-stream("" max-connections(10) group(log)); }; : log { source(s1); source(s2); ... optional_element(filter1|parser1|rewrite1); optional_element(filter2|parser2|rewrite2); ... destination(d1); destination(d2); ... flags(flag1[, flag2...]); }; (localhost) . source s_localhost { network(ip(127.0.0.1) port(1999)); }; destination d_tcp { network("10.1.2.3" port(1999) localport(999)); }; log { source(s_localhost); destination(d_tcp); }; syslog-ng OSE DNS . . options syslog-ng OSE : options { option1(params); option2(params); ... }; : syslog-ng OSE : options { use-dns(no); }; syslog-ng OSE . : syslog-ng OSE (TABLE 1: SOURCE DRIVERS AVAILABLE IN syslog-ng OSE) +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | | | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |file() | . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |wildcard-file() | . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |internal() | syslog-ng OSE . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |network() | BSD-syslog IPv4 IPv6 . TCP UDP TLS . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |nodejs() | JSON nodejs . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |mbox() | mbox . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |osquery() | osquery . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |pacct() | . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |pipe() | . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |program() | . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |snmptrap() | SNMP snmptrapd Net-SNMP . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |sun-stream(), sun-streams() | STREAMS Solaris . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |syslog() | IETF syslog . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |system() | syslog-ng OSE . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |systemd-journal() | systemd . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |systemd-syslog() | systemd . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |unix-dgram() | SOCK_DGRAM . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |unix-stream() | SOCK_STREAM . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |stdin() | . | +----------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ : syslog-ng OSE (TABLE 2: DESTINATION DRIVERS AVAILABLE IN syslog-ng OSE) +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | | | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |amqp() | (AMQP) . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |elasticsearch-http | Elasticsearch . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |file() | . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |graphite() | Graphite . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |graylog2() | syslog Graylog . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |hdfs() | (HDFS) . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |http() | HTTP . : http http . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |kafka() | Apache Kafka . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |loggly() | << >> Loggly . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |logmatic() | << >> Logmatic.io . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |mongodb() | MongoDB . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |network() | BSD-syslog IPv4 IPv6 . TCP UDP TLS . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |pipe() | . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |program() | (fork/launch) . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |redis() | - - Redis . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |riemann() | Riemann . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |smtp() | . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |sql() | SQL . syslog-ng OSE sql() . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |stomp() | STOMP . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |syslog() | IETF-syslog . IETF UDP TCP TLS . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |unix-dgram() | SOCK_DGRAM (BSD). | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |unix-stream() | SOCK_STREAM (Linux). | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ |usertty() | . | +-------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ : syslog-ng OSE (TABLE 3: FILTER FUNCTIONS AVAILABLE IN syslog-ng OSE) +----------------------+-----------------------+ | | | +----------------------+-----------------------+ |facility() | | +----------------------+-----------------------+ |filter() | | +----------------------+-----------------------+ |host() | | +----------------------+-----------------------+ |inlist() | | +----------------------+-----------------------+ |level() or priority() | | +----------------------+-----------------------+ |match() | | +----------------------+-----------------------+ |message() | | +----------------------+-----------------------+ |netmask() | | +----------------------+-----------------------+ |program() | | +----------------------+-----------------------+ |source() | | +----------------------+-----------------------+ |tags() | | +----------------------+-----------------------+ (FILES) /Users/hofi/Develop/Balabit/syslog-ng/build/install/ /Users/hofi/Develop/Balabit/syslog-ng/build/install/etc/syslog-ng.conf : syslog-ng OSE syslog-ng OSE Administration Guide[1] syslog-ng OSE mailing list[2] . syslog-ng OSE syslog-ng OSE blogs[3] . (AUTHOR) syslog-ng OSE Administration Guide[1] . (COPYRIGHT) (NOTES) [1] syslog-ng OSE Administration Guide [2] syslog-ng OSE mailing list [3] syslog-ng OSE blogs 4.10.2 18 December 2025 syslog-ng.conf(5)