syslog-ng-3.24.1

3.24.1

Highlights

• Add a new template function called $(format-flat-json), which generates
  flattened json output. This is useful for destinations, where the json
  parsing does not handle nested json format. (#2890)
• Add ISO 8601 compliant week numbering. Use it with the ${ISOWEEK} macro
  and and all its variants: S_ISOWEEK, R_ISOWEEK and C_ISOWEEK. (#2878)
• Add add-contextual-data() glob selector. It matches the message with shell
  style globbing. Enable it by setting selector(glob("$my_template") in the
  add-contextual-data() block. (#2936)
• Add new rewrite operations to manipulate the timezone portion of timestamps have
  been added. set-timezone() to set the timezone value to a specific value,
  fix-timezone() to fix up an incorrectly recognized timezone and guess-timezone()
  to automatically deduce the timezone value on the assumption that the message
  is received in near real time. (#2818)
• Send Server Name Identification (SNI) information with transport(tls).
  Enable it by setting the sni(yes) option in the tls block in your
  destination. (#2930)

Features

• templates: change the $LOGHOST macro to honour use-fqdn() (#2894)
• Define syslog-ng-sysconfdir (#2932)
• dqtool: add assign dqfile to persist file feature (#2872)

Bugfixes

• Fix backtick subsitution of defines/environment variables in the main configuration file. (#2906, #2909)
• Fix SCL block parameter substitution of quoted escaped newline (#2901)
• python, diskq, random-generator source: crash after failed reload (#2907)
• Fix crash at shutdown on 32bit systems (#2893, #2895)
• Invalidate the value of the LEGACY_MSGHDR macro in case either the PID or the PROGRAM
  macros are unset() using a rewrite rule. Previously LEGACY_MSGHDR would retain the old values. (#2896)
• on 32bit platform diskq ftruncate could fail due to size 32/64 interface (#2892)
• Support new tzdata format, starting from version 2009.XXX, in tzinfo parser. (#2898)
• udp, udp6, tcp, tcp6, syslog, network destination: Correctly detect and set IP_MULTICAST_TTL
  in case of multicast ip address (#2905)
• Fix hostname resolve on systems with only the loopback network interface configured (#2933)
• wildcard-file(): Add multi-line(), pad_size() and multi-line-mode() option validation. (#2922)
• kafka-c: Fix multiple memleaks (#2944)

Other changes

• geoip: remove deprecated module, geoip2 database location detection (#2780)
• various refactor, build issue fixes (#2902)

Notes to the developers

• LightRunWithStrace: Run syslog-ng behind strace (#2921)
• LightVerboseLogOnError: Increase default pytest verbosity on error (#2919)
• Dbld image caching (#2858)
• Dbld gradle caching (#2857)
• logreader,logsource: move scratch-buffer mark and reclaim into LogSource (#2903)

Credits

syslog-ng is developed as a community project, and as such it relies
on volunteers, to do the work necessarily to produce syslog-ng.

Reporting bugs, testing changes, writing code or simply providing
feedback are all important contributions, so please if you are a user
of syslog-ng, contribute.

We would like to thank the following people for their contribution:

Andras Mitzki, Antal Nemes, Attila Szakacs, Balazs Scheidler, Bertrand Jacquin,
Gabor Nagy, Henrik Grindal Bakken, Kerin Millar, kjhee43, Laszlo Budai,
Laszlo Szemere, László Várady, Péter Kókai, Raghunath Adhyapak, Zoltan Pallagi.

syslog-ng-3.23.1

3.23.1

Features

• The redis() destination now handles any number of command parameters.
  (#2816)

• The format() option of date-parser() supports lists. From now on, a
  single date-parser() instance is able to process different date formats,
  making it easy to catch on when some programs change the way they log
  information. (#2779)

• Add relocation support for disk-buffer(). The relocate subcommand of
  dqtool can be used to move a single or multiple queue files. (#2855)

• file(), pipe(): The time-reap() option now can be set or disabled for
  each destination separately.
  Use time-reap(0) to disable closing idle destination files. (#2798)

• syslog-ng-ctl: Add list-files subcommand to print files present in the
  current configuration. (#2797)

Bugfixes

• Fix minor memory leaks (#2868)
• Add global context to standalone parsers (#2876)
• Fix heap usage after free in cfg_run_parser_with_main_context (#2884)
• Fix g_thread_init call order issue with older glibs (#2853)
• SNMP destination: fixing statistics format (#2854)
• eventlog: flush escaped_buffer when full (#2837)
• dbparser: remove unnecessary lock (#2838)
• dbparser: fix crash when context times out in the middle of another rule (#2832)
• radix: fix grouping in PCRE (#2808)
• add-contextual-data: make filters config plugin aware (#2886)
• Undefined warning regression (#2829)

Other changes

• Disable time-reap() on non-templated filenames by default (#2798)
• The --preprocess-into command line flag accepts -, and writes the
  preprocessed configuration to stdout. (#2869)
• Add information on environment variables passed to the confgen script (#2888)
• Light: minor fixes (#2867, #2844)
• python: use malloc_debug for python unit tests (#2866)
• Travis: verbose unit test output (#2851)
• Travis cleanup (#2809)
• filter: add unit tests to filter-op (#2835)
• Fix clang/gcc diagnostic differences (#2810)
• Fix leak in stats test (#2874)
• cmake, autotools: -Wundef to enable-extra-warning (#2806)

Notes to the developers

• Check whether commit messages are properly formatted (#2803, #2807)
• gitignore: tags file and build directory (#2794)

Credits

syslog-ng is developed as a community project, and as such it relies
on volunteers, to do the work necessarily to produce syslog-ng.

Reporting bugs, testing changes, writing code or simply providing
feedback are all important contributions, so please if you are a user
of syslog-ng, contribute.

We would like to thank the following people for their contribution:

Andras Mitzki, Antal Nemes, Attila Szakacs, Balazs Scheidler, Gabor Nagy,
Laszlo Budai, Laszlo Szemere, László Várady, Mark Bonsack, Mehul Prajapati,
Péter Kókai, Romain Tartière, Zoltan Pallagi.

syslog-ng-3.22.1

3.22.1

Highlights

• Sending SNMP traps: Using the new snmp() destination, incoming log messages
  can be converted to SNMP traps, as the fields of the SNMP messages can be
  customized with macros. (#2693)

• $(template) dynamic binding: Extends the $(template) template function to
  allow dynamic binding. For example, the name of the template to be invoked
  can come from the message (name-value pairs). (#2716)

• syslog(), network(): Add dynamic-window-size() option to enable dynamic
  flow control that distributes the specified amount of window between active
  connections at runtime. This can be used in low-memory environments, where
  only a small subset of the active clients sends messages at high rate.
  (#2772)

Features

• match(): Add support for the template() option (#2715)
• add-contextual-data(): Allow using templates in name-value pairs (#2711)
• Add support for floating point operations in template functions (#2742)
• Add support for usec precision when parsing time (#2709)

Bugfixes

• Fix null pointer access when destinations are suspended (#2778)
• Fix grouping-by() deadlock (#2758)
• Fix a general source-related crash and enhance wildcard-file()'s bookmark
  handling (#2589)
• Fix infinite loop (reload/reopen) (#2739)
• Fix python() package/module name collision (#2438)
• Fix escaped quote in block argument (#2781)
• Reintroduce test on SYSLOG_NG_HAVE_TIMEZONE (#2774)
• snmp(): Fix template leak (#2746)

Other changes

• Never drop flow-controlled messages: The meaning of log-fifo-size() has
  changed to avoid dropping flow-controlled messages when log-fifo-size() is
  misconfigured. From now on, log-fifo-size() only affects messages that are
  not flow-controlled. (#2753)

• The -d/--debug syslog-ng command line flag no longer implies
  -e/--stderr. If you want to redirect internal() source to stderr,
  use the -e/--stderr option explicitly. (#2731)

• dbld, RPM and DEB packaging improvements (#2724)

• Checkpoint parser improvements (#2740)

• Reset the timezone on config reload event (#2691)

• geoip2(): Include IP into the error message (#2743)

• Improve regexp error messages (#2796)

• http(): Warn if less workers used than urls (#2757)

• http(): Allow URLs to be specified by a space/comma separated string
  (#2699)

• loggen: Change message rate at runtime using signals (#2756)

• debun: add acquire_running_syslog_config function (#2752)

• FreeBSD fixes for the test suite (#2783)

Notes to the developers

• ivykis: update to 0.42.4 (#2736)
• Support generator plugins in global options (#2747)
• logthrfetcher: new constants (#2766)
• logthrsourcedrv: support position tracking (#2750)
• Light: Support pre-commit and tox (#2725)
• Enable Bison error flags: conflicts-sr/rr (#2762)
• Dynamic stats constant registration (#2761)

Credits

syslog-ng is developed as a community project, and as such it relies
on volunteers, to do the work necessarily to produce syslog-ng.

Reporting bugs, testing changes, writing code or simply providing
feedback are all important contributions, so please if you are a user
of syslog-ng, contribute.

We would like to thank the following people for their contribution:
Andras Mitzki, Antal Nemes, Attila Szakacs, Balazs Scheidler,
Christian Michallek, Fabien Wernli, Gabor Nagy, Kyeong Yoo, Laszlo Budai,
Laszlo Szemere, László Várady, Mehul Prajapati, Norbert Takacs, Oleksii Hamov,
Péter Kókai, Romain Tartière, Zoltan Pallagi.

syslog-ng 3.21.1

3.21.1

Highlights

• Add an alternative, native, librdkafka based kafka-c() destination in
  parallel of the existing Java implementation, that provides the same
  configuration interface. Eventually, we expect this to replace the Java
  one (#2496)

• Add a native, http() based destination based driver for elasticsearch
  called elasticsearch-http(), as an alternative of the Java one.
  Eventually, we expect this to replace the Java implementation. (#2509)

• Add the ability to automatically determine the timezone value for an
  incoming log entry as long as the incoming stream is close to real time
  and the timezone information is missing from the timestamp. Enable this
  function by using flags(guess-timezone) for sources and the
  date-parser(). (#2517, #2673)

Features

• syslog(): Add the ability to work with messages larger than log-msg-size()
  in the source driver by using the trim-large-messages(yes) option.
  The characters over the limit will be truncated. Previously messages
  longer than the limit caused the connection to be closed abruptly.
  (#2644)

• amqp(): add support for heartbeats and the "external" authentication
  mechanism. (#2676, #2626)

• graylog2(): add support for TLS and UDP. (#2657)

• udp(): Add spoof-source-max-msglen() option to allow setting the
  maximum spoofed datagram size, which was hard-wired to 1024 previously.
  (#2535)

• db-parser(): add an option program-template() that customizes the
  value used for matching the PROGRAM field. (#2651)

• pdbtool: Add sort option to pdbtool merge (#2664)

• $(implode) and $(explode): add template functions to split and join
  strings based on a simple separator. The exploded array is represented as
  a syslog-ng list that can be manipulated with the $(list-*) template
  functions. (#2700)

• Add an --omit-empty-values option for value-pairs based destinations &
  template functions. (#2519)

• grouping-by() parser: add sort-key() option (#2701)

Support for non-syslog or non-standard formats in SCL

• apache-accesslog-parser(): support for vhost:port as the first field in
  common/combined log formats (#2688)
• Add application adapter for Junos classification (#2684)
• Add parser and adapter for CheckPoint LogExporter output (#2665)

Bugfixes

• Fix race condition of idle timer and scheduled I/O job (#2650)
• Few leaks find via sanitizer (#2696)
• syslogformat: set $MSG even if the incoming message is empty (#2672)
• Fix double-free error in logproto unit tests (#2662)
• groupingby: identical persist name (#2659)
• stats: deindex pruned counters/clusters (#2648)
• Type hinting should not accept empty values (#2639)
• app-parser, pseudofile: fix crash with grammar error (#2640)
• python: set_timestamp normalization (#2643)
• db-parser: fix memory leak (#2652)
• grouping-by: use after free, memory leak, missing init calls of filters (#2655)
• amqp: fixing double connect (#2660)
• old style definition warning fixes (#2680)
• Fix "!=" filter (#2683)
• dbparser: fix memleak (#2706)
• nondumpable-allocator: fixing mmap error handling (#2666)
• Fix timeutils warning (#2604)
• Fix old style include statement compatibility (#2600)
• Fix config revert (threaded destinations) (#2596)
• Add warning on old style include statement (#2592)

Other changes

• cfg-parser: add aliases for yesno (#2671)
• Include json-c in the dist tarball (#2590)
• cmake: disable_all_modules support (#2647)
• Cmake clang sanitizer (#2562)
• timeutils refactor (#2483)
• Expedite threaded flush at reload (#2656)
• elasticsearch2: Added deprecation warning (#2628)
• Astyle fixes (#2624)
• Force C99 with GNU (#2623)
• Make rewording and other small edits to README (#2608)
• Port tests to Criterion (#2607, #2661, #2621, #2620, #2619, #2618, #2617,
  #2616, #2615, #2599, #2594, #2593, #2591, #2586, #2584, #2583)
• test_reliable_backlog: fix random failure (#2668)
• Fix unit test with function pointer dereference in case of ASLR, Criterion (#2669)
• test-stats-query: fix unit test (#2603)

Notes to the developers

• Version from git describe (#2627)
• light: example-msg-generator support (#2571)
• light: test app parser applications (#2686)
• light: Switch to native logger (#2546)
• light: Remove SetupTestcase() dependency (#2587)

Credits

syslog-ng is developed as a community project, and as such it relies
on volunteers, to do the work necessarily to produce syslog-ng.

Reporting bugs, testing changes, writing code or simply providing
feedback are all important contributions, so please if you are a user
of syslog-ng, contribute.

We would like to thank the following people for their contribution:
Andras Mitzki, Antal Nemes, Attila Szakacs, Balazs Scheidler, Chris Spencer,
David Liew, Fabien Wernli, Gabor Nagy, Laszlo Budai, Laszlo Szemere, Layne,
László Várady, Mehul Prajapati, Nik Ambrosch, Parth Wazurkar, Péter Kókai,
Terez Nemes, Victor Ma, Zoltan Pallagi.

syslog-ng-3.20.1

3.20.1

Features

• Add persist-tool (#2511)
• Collectd destination (#1433)
• Config reload status feedback (#2367)
• Netskope parser (#2541)
• Websense parser (#2471)
• Json list support (#2536)
• Xml-parser: add list support (#2544)

Bugfixes

• DNS memory leak/segfault fix (#2500)
• Elasticsearch2: fix bulk send for client-mode("http") (#2478)
• Few leak fix (#2563)
• Filter-re: ref/unref NVTable around regex eval (#2494)
• Fix allowing negative version number in config (#2548)
• Fix app-parser() per reload memory leak (#2469)
• Fix non-reliable disk-queue truncating problem on load (#2406)
• Fix threaded source/destination crash when reverting configuration (#2555)
• Http: add missing free for self->body_template (#2558)
• Java, elasticsearch2, explicit unsupport for named templates (#2534)
• Loggen: parameter handling (#2477)
• Python-source: fix crash when posting from python thread (#2533)
• Read acknowledgments send by Riemann (#2523)
• Redis, Riemann: fix ref/unref-ing templates (#2514, #2530)
• Syslog-ng@default: use pid file location on control socket (#2489)
• Threaded-dest: Fix integer overflow (#2512)
• Threaded-dest: make persist_name local (#2516)
• Xml/geoip2: make prefix optional (#2538)

Other changes

• Autotools, cmake: add detection for pylint, nosetests (#2537,#2564)
• Autotools: relaxing python dependency requirement (#2472)
• Cfg-parser: printing error positions in case of parse failure (#2455)
• Cmake: add missing detections (#2510)
• Collect-cov.sh: make coverage should work with lcov in bionic (#2515)
• Configure: fix "--with-docbook*" option usage (#2465)
• Custom LGTM.com query for detecting uses of gmtime that are not covered by a lock (#2413)
• Fix static uClibc-ng support (#2501)
• Format non-literal fixes (#2567)
• Grammar: remove the pragma less include (#2550)
• Http-worker: refactor & fix curl_easy_getinfo error message (#2527)
• Lib/compat: replace strcasestr() implementation (#2482)
• Libtest: Adding stopwatch.h into libtest_HEADERS list (#2553)
• Packaging: fix the description of mod-examples (#2522)
• Python-debugger: fix macro completion (#2439)
• Python, java destination add already introduced retry (#2559)
• Remove elastic v1 support (#2554)
• Simplify libtest queue utils (#2556)
• Syslog-ng.8.xml: remove unneeded default-modules section (#2475)
• Travis: use the latest Bison version (macOS) (#2529)
• Various fixes for issues reported by LGTM (#2524)

Notes to the developers

• Example-msg-generator: num option (#2565)
• Own grammar support in generator plugin (#2552)
• ProtoClient: provide process_in function to logwriter (#2468)
• Pytest_framework: eliminating __registered_instances, exposing SyslogNgCtl to user api (#2503)
• Pytest_framework: MessageReader: Explain the local context around python asserts (#2507)
• Pytest_framework: support for implicit groups in config.create_logpath (#2490)
• Pytest: Renaming pytest_framework to python_functional (#2542)
• Python-destination: send can return worker_insert_result_t, flush support (#2487)
• Python: internal() source exposed via syslogng.Logger (#2505)
• Remove unused submodules (#2525)
• Simpler names for WORKER_INSERT_RESULT_T in language bindings (#2506)
• Split xml-parser into xml-parser and xml-scanner (#2459)

Credits

syslog-ng is developed as a community project, and as such it relies
on volunteers, to do the work necessarily to produce syslog-ng.

Reporting bugs, testing changes, writing code or simply providing
feedback are all important contributions, so please if you are a user
of syslog-ng, contribute.

We would like to thank the following people for their contribution:
Andras Mitzki, Andrej Valek, Antal Nemes, Attila Szakacs, Balazs Scheidler,
Bas van Schaik, Fᴀʙɪᴇɴ Wᴇʀɴʟɪ, Gabor Nagy, Laszlo Boszormenyi, Laszlo Budai,
Lorand Muzamel, László Várady, Mehul Prajapati, Naveen Revanna, Peter Czanik,
Peter Kokai, Romain Tartière, Stephen, Terez Nemes, Norbert Takács,
Soubhik Chakraborty, NottyRu, Chris Packham.

syslog-ng-3.19.1

3.19.1

Features

• HTTP load balancer (#2347)
• Slack destination (#2451)
• Add Cisco Catalyst formatted triplets support to cisco-parser() (#2394)
• Add RFC5424 syslog support to the system() source (FreeBSD 12.0 support) (#2430)
• Add network interface() option to network sources (#2389)
• Add so-reuseport() to network drivers (#2379)
• Enable supporting HTTP redirects (#2136)

Bugfixes

• Fix frequent disconnects of syslog() with TLS (#2432)
• Fix possible refcount leak during reload/shutdown (#2434)
• Fix message storm on trace level (#2425)
• Fix use after free in file destinations (time-reap) (#2418)
• Fixing a few memleaks in the Java destination (#2417)
• Fix telegram dst default ca dir (#2416)
• Fix prefix handling in $(list-concat) and $(strip) (#2405)
• Fixing an eventfd leak with ivykis<=0.38 (threaded destinations) (#2404)
• Process flush result after worker thread exits (threaded destinations) (#2402)
• hdfs: do not try to write unopened file (#2391)
• Fix leaks in redis() destination (#2383)
• Block location tracking fixes (#2378)
• Fix $(basename) and $(dirname) in the presence of a prefix (#2371)
• Fixing a false positive corruption detection in non-reliable diskq (#2356)
• Check if /proc/kmsg can be opened in system-source (#2408)
• Fix include guard in systemd-journal (#2445)
• Remove hexadecimal and octal number parsing from templates (#2401)

Other changes

• Do not load certs from default CURL ca-dir by default (http() destination) (#2410)
• Disable SSL compression by default (#2372)
• Flush lines cleanup (#2386, #2392)
• Refine json-parser() log messages to be less alarming (#2437)
• Move some messages to trace (#2358)
• Make include-path more discoverable (#2426)
• Adding build flag -Wmissing-format-attribute and -Wsuggest-attribute=noreturn (#2423)
• Rewrite filter unit tests based on criterion (#2422)
• PytestFramework in Travis (#2415)
• syslog-ng-mod-java debian pkg should depend on headless jre (#2388)
• Add contextual data error reporting improvements & csv-scanner refactor (#2373)
• Afsocket remove unused functions/bitfields (#2363)
• Afsocket minor cleanup/refactor (#2355)
• Riemann worker (#2313)
• Afsql threaded dest driver (#2097)
• dbld: do not mount .gitconfig if missing (#2419)
• dbld: Add missing docbook-xsl packages (#2398)
• dbld: update criterion to 2.3.3 (#2396)
• dbld: Remove "proposed" Ubuntu repository from enable_dbgsyms() (#2382)
• dbld: Add new target "list-builder-images" (#2381)
• dbld: Support Ubuntu Bionic and update existing images (#2318)
• dbld: release target should use the default image (#2464)

Notes to the developers

• PytestFramework: Add initial test framework (#1940)

Credits

syslog-ng is developed as a community project, and as such it relies
on volunteers, to do the work necessarily to produce syslog-ng.

Reporting bugs, testing changes, writing code or simply providing
feedback are all important contributions, so please if you are a user
of syslog-ng, contribute.

We would like to thank the following people for their contribution:

Abder Benbachir, Andras Mitzki, Antal Nemes, Attila Szakacs, Balazs Scheidler,
Gabor Nagy, Gergely Tonté, JP Vossen, Juhasz Viktor, Laszlo Budai,
Laszlo Szemere, László Várady, Norbert Takacs, Peter Kokai, Zoltan Pallagi.

syslog-ng-3.18.1

3.18.1

Features

• HTTP batching (#2135)
• HTTP multi threading (#2291)
• HTTP framing support for batches (#2190)
• Python source (#2308)
• Template support for Python destination (#2196)
• HDFS time-reap (#2257)
• Riemann batching (#2098)
• flush-timeout() for HTTP (#2251)
• Base64 encoding template function (#2223)
• url-decode() template function (#2278)
• Allow IPv4 mapped addresses in IPv6 mode (#2312)
• app-parser: set ${.app.name} to the application identified (#2290)
• Value pairs improvements (#2287)
• syslog-ng-ctl config to print pre-processed configuration (#2280)
• Add support for whitespace in template functions (#2271)
• Verify the configuration is the same as on the disk (#2345)

Bugfixes

• Fix queue counters race condition (#2316)
• AMQP configurable max connection and frame size (#2343)
• Fix wakeup in threaded sources (#2339)
• Fix libnet memory leak in network destinations (#2331)
• Fix unexpected flag check-hostname in syslog-parser (#2314)
• Fix memory leak in dbparser (#2311)
• Inline Python code comment generates syntax error (#2319)
• Password protected SSL keys portability (MADV_DONTDUMP) (#2341)
• Fixing compiler warnings from armv7l (#2301)
• Riemann crashes in flush (#2296)
• Revert sticky hook option (#2295)
• Small stats fixes (#2294)
• Detect filter loop (#2283, #2288)
• Fix infinite loop in threaded destinations with ivykis prior 0.39 (#2275)
• Fix log expr node use after free (#2269)
• Remove gradle from the list of "BuildRequires" (RPM packaging) (#2266)
• Fix wildcard-source memleak when directory removed (#2261, #2267)
• Missing macros: C_AMPM, C_USEC, C_MSEC, C_HOUR12 (#2259)
• Fix cisco timestamp parsing (#2272)
• Undefined filter reference (#2273)
• Fix the literal() type hint (#2286)
• logwriter, affile, afsocket: fixing "internal overflow". (#2250)
• lib/gsockaddr.c: modify the unix salen calculation (#2285)
• dbld: fix dbld/rules deb failure (#2282)
• Update data type to avoid conversion. (#2281)
• compat/getent: add support for platforms that lack the r versions (#2244)
• Fix memory leak caused by saving stats counter to persist config (#2279)
• Hdfs: disable archive when append-enabled is configured (#2235)
• scl: add linux-audit() SCL to make files (#2230)
• DebianPackaging: Add linux-audit SCL to included dirs (#2254)
• cap_syslog capability detection (#2227)
• LogProto partial write (#2194)

Other changes

• telegram, urlencode: api changes (#2299)
• python: include python2/3 in plugin description (#2337)
• Stats prepare for multiple queues per destdrv (#2302)
• Update deprecated use of tcp()/udp() to network(). This addresses #2322 (#2326)
• Message about not supported cap_syslog only at debug level (#2333)
• Few test leak fix (#2323)
• warning elimination: pointer arithmetics (#2305)
• templates: get rid off the args_lock (#2289)
• Ack tracker small refact (#2277)
• ElasticSearchDestination: Display deprecated warning message about us… (#2274)
• Improve Readme.md header structure (#2258)
• Rewrite json tests based on criterion (#2255)
• Rewrite dbparser tests based on criterion (#2252)
• Processed timestamp (#2243)
• msg parameters: remove last NULL parameter from msg macros (#2242)
• Fix threaded destination test cases (#2236)
• dbld: missing packages, deps changes (#2232, #2332, #2327, #2260, #2256)
• Use msg_trace() when emitting trace information (#2226)

Notes to the developers

• Threaded source and fetcher (#2247)
• "Examples" module (#2248)
• Do not ship mongo-c-driver with syslog-ng (remove as submodule) (#2245)

Credits

syslog-ng is developed as a community project, and as such it relies
on volunteers, to do the work necessarily to produce syslog-ng.

Reporting bugs, testing changes, writing code or simply providing
feedback are all important contributions, so please if you are a user
of syslog-ng, contribute.

We would like to thank the following people for their contribution:

Andras Mitzki, Antal Nemes, Balazs Scheidler, Gabor Nagy, Gergely Tonté,
Laszlo Budai, Laszlo Szemere, László Várady, Maurice T. Meyer, Mahmoud Salama,
Norbert Takacs, Peter Czanik, Peter Gyorko, Peter Kokai, Robert Fekete,
Terez Nemes, Tibor Bodnar, Zoltan Pallagi, y-l-i.

syslog-ng-3.17.2

3.17.2

Bugfixes

• Fix a bug in flow-control (#2224)
• Fix template function evaluation in debugger (#2220)

syslog-ng-3.17.1

3.17.1

Features

• Client side failback mode (#2183)
• New linux-audit() source as SCL (#2186)
• Decorating generated configuration (#2218)
• Introduce ewmm() source (#2199, #2209)
• Add parsing of Cisco unified call manager (#2134)
• Mandatory parameters for cfg-block (SCL) (#2088)

Bugfixes

• dqtool cat print backlog items (#2213)
• Rewind backlog in case of stateless LogProtoClient (#2214)
• Filter out incorrectly parsed sudo logs (#2208)
• Minor fixes related to client-lib-dir, loggen and eventlog (#2204)
• Minor stats-query fixes and refactor (#2193)
• Reliable disk buffer non-empty backlog (#2192)
• Fix pip package versions on older distro releases (dbld) (#2188)
• Fix a groupset/groupunset and map-value-pairs() crash (#2184)
• Make g_atomic_counter_set() atomic and update minimum glib version to 2.26 (#2182)
• Aligning java related SCLs with mandatory parameters (#2160)
• Loggen minor fixes (#2150)
• grab-logging should be installed as a header (#2151)
• Fix possible underflow of memory_usage (afsql, logqueue-fifo) (#2140)
• Fix SELinux module version inconsistency (#2133)
• Fix CMake unit test compilation (no-pie) (#2137)
• Fix possible crash in syslog-parser() (#2128)
• Disable ack for mark mode (#2129)
• Fixing a Telegram destination bug with bot id (#2142)
• All drivers should support inner destination or source plugins (#2143)
• Fix default file and directory creation ownership (#2119)
• Fix global "center;;received" counter when systemd-journal() is used (#2121)
• Link everything to libsecret-storage (#2100)
• Inform about the right dns-cache() configuration (warning message typo) (#2145)
• Adjusting window size for internal mark mode (#2146)
• Fix memory leaks in disk-buffer() (#2153)
• Fix undefined behavior in log multiplexer (#2154)
• Fix static linking mode (autotools) (#2155)
• Fix internal mark mode infinite loop with old ivykis (#2157)
• Fix missing normalize flags (#2162)
• Keep JVM running on reload if once configured (#2164, #2211)
• Fix a race condition (suspend) in LogSource (#2167)
• Add @requires json-plugin to the cim() parser (#2181)
• Added exclude_kmsg option to system source (#2166)
• Fix padding template function (#2174)
• Leak & invalid memory access (#2173)
• FreeBSD 11.2 builderror SOCK_STREAM (#2170)
• Add ref-counted TLSVerifier struct (use after free fix) (#2168)

Other changes

• Improve loggen's file message parser (#2205)
• syslog-ng-debun improvements (#2201)
• Goodbye "goto relex" (refactor) (#2198)
• Refactor the callback registration mechanism of WildcardFileReader (#2185)
• Extended Linux capabilities detection (pkg-config) (#2169)
• Add atomic gssize (#2159)
• Lower the message level of @requires to debug (#2147)
• macOS warning elimination (#2139)
• Remove a misleading rewrite-related debug message (#2132)
• Minor updates to SELinux policy installer script (#2127)
• More robust GLib detection (CMake) (#2125)
• Logthreaded nonfunctional changes (#2123)
• Confgen and pragma improvements (#2122)
• Flush before stopping syslog-ng (functional tests) (#2216)
• Port unit tests into criterion (test_filters_netmask6, test_findeom, csv_parser, patternDB) (#2217, #2175, #2118)
• Libtest refactors (#2149)
• Add missing files to the source tarball (#2114)
• Better python binary detection (#2092)

Notes to the developers

• LogThreadedDestDriver batching (#2063)
• Add sqlite3 and riemann to dbld devshell (#2210)
• Make mock-transport inheritable (#2120)

Credits

syslog-ng is developed as a community project, and as such it relies
on volunteers, to do the work necessarily to produce syslog-ng.

Reporting bugs, testing changes, writing code or simply providing
feedback are all important contributions, so please if you are a user
of syslog-ng, contribute.

We would like to thank the following people for their contribution:

Andras Mitzki, Antal Nemes, Balazs Scheidler, Bernie Harris, Bertrand Jacquin,
Gabor Nagy, Gergely Nagy, German Service Network, Janos SZIGETVARI, Laszlo Budai,
Laszlo Szemere, László Várady, Norbert Takacs, Peter Czanik, Peter Kokai,
Szigetvari Janos, Terez Nemes, Viktor Juhasz.

syslog-ng-3.16.1

3.16.1

Features

• Telegram destination and $(urlencode) template function (#2085)
• Error reporting on misspelled block args (#1952)
• New ignore_tns_config Oracle SQL destination config option (#2054)
• Per-source "src.host" and "src.sender" counters (#2013)

Bugfixes

• Fix possible loss of log messages in the systemd-journal() source (#1570, #1587, #1612)
• Fix file source location information in internal logs (#2028)
• Fix SDATA deserialization (disk-buffer crash) (#1919, #2067)
• Fix unaccepted embedded 'file' keyword (file source and destination) (#2076)
• Fix memory leaks in appmodel and varargs (#2086)
• Fix a bug in the old LogMessage deserialization (#2103)
• Fix reading the output of the confgen program (#1780, #2108)
• Add safer mem_zero() to secret-storage (#2049)
• Fix undefined behavior in syslog-ng-ctl query (#2043)
• Fix lloc tracking for multi line blockrefs (#2035)
• Added missing 'else {};' to default-network-drivers() to forward unparsable messages (#2027)
• Fix mixed linking (#2020, #2022)
• Fix compilation of evtlog on FreeBSD (#2014, #2015)
• Fix thread_id allocation for more than 32 CPUs (crash) (#2008)
• Add safe logging of errno (#1990, #1999)
• Fix warnings related to floating point operations (#1959, #1996)
• Partial revert of plugin discovery to bring back valgrind (#1953, #1995)
• Fix connection close in network sources (#1991)
• Fix file deletion in the wildcard-file() source (#1974)
• Disable the DNS cache if use-dns(no) is used (#1923)
• Fix compiler error for gcc 4.4 (#2044)
• Fix emitted warnings due to -no-pie detection for gcc 4.4 (#2037)
• Fix date format in functional tests (#2036)
• Dbld fixes (#2034)
• Rename PAGESIZE variables to pagesize in secret-storage (compilation fix) (#2111)
• Fix the lifetime of TLSContext to prevent crash on reload (#2080, #2109)
• Fix reaping program() source and destination when a Java-based destination is used (#2099)

Other changes

• Add debug message to program source/destination about successful start (#2046)
• Report memory exhaustion errors during config parsing (#2033)
• Improved debug logs (#2032)
• Dbld coverage (#2031)
• LogTransportMock enhancement (#2017)
• Modify the license of loggen from GPL to LGPL (#2006)
• Loggen refactor (#1987)
• Update RPM generation (#1980, #2113)
• Support ENABLE_EXTRA_WARNINGS with CMake (#2072)
• Rewrite unit tests based on Criterion (#2026, #2058, #2039, #2018, #2003)
• Lexer test coverage improvements (#2062)
• preparation for 3.16 OSE rhel/packaging (#2113)

Notes to the developers

• Do not ship rabbitmq-c with syslog-ng (remove as submodule) (#2052)
• Multitransport (#2057)
• Timeout support for LogReader and LogWriter (#2056)
• Update ivykis to 0.42.3 (submodule) (#2012)
• Drop explicit version numbers from requirements.txt (#2050)
• CMake modernization pt. 1 (#2007)
• Assert when log_pipe_clone() is not implemented (#2019)
• Small Java code refactor (#2066)

Credits

syslog-ng is developed as a community project, and as such it relies
on volunteers, to do the work necessarily to produce syslog-ng.

Reporting bugs, testing changes, writing code or simply providing
feedback are all important contributions, so please if you are a user
of syslog-ng, contribute.

We would like to thank the following people for their contribution:
Andras Mitzki, Andrej Valek, Antal Nemes, Balazs Scheidler, Gabor Nagy,
Gergely Nagy, German Service Network, Jakub Wilk, Laszlo Budai, Laszlo Szemere,
Laszlo Varady, Mehul Prajapati, Norbert Takacs, Peter Czanik, Peter Kokai,
Tomasz Kazimierczak, Viktor Juhasz