Rsyslog is a multi-threaded implementation of syslogd (a system utility providing support for message logging), with features that include:
- reliable syslog over TCP, SSL/TLS and RELP
- on-demand disk buffering
- email alerting
- writing to MySQL or PostgreSQL databases (via separate output plugins)
- permitted sender lists
- filtering on any part of the syslog message
- on-the-wire message compression
- fine-grained output format control
- failover to backup destinations
- enterprise-class encrypted syslog relaying
Original maintainer | Michael Biebl |
---|---|
Homepage | http://www.rsyslog.com/ |
8.2001.0


8.1907.0

8.1901.0



8.39.0



8.37.0

8.34.0

8.33.1


8.32.0



8.24.0



8.16.0


Distribution | Version | Since | Package | Installed | Packager | |
---|---|---|---|---|---|---|
![]() | rpm | 8.24.0-38.el7 | 2020-01-07 | 616 kiB | 1.91 MiB | CentOS BuildSystem |
![]() | rpm | 8.24.0-41.el7_7.4 | 2020-03-18 | 618 kiB | 1.91 MiB | CentOS BuildSystem |
![]() | rpm | 8.24.0-41.el7_7.2 | 2020-01-07 | 616 kiB | 1.91 MiB | CentOS BuildSystem |
![]() | rpm | 8.24.0-41.el7_7 | 2020-01-07 | 616 kiB | 1.91 MiB | CentOS BuildSystem |
![]() | deb | 8.1901.0-1 | 2019-03-10 | 643 kiB | 1.77 MiB | Michael Biebl |
![]() | deb | 8.24.0-1 | 2017-11-10 | 540 kiB | 1.47 MiB | Michael Biebl |
![]() | deb | 8.1901.0-1~bpo9+1 | 2019-03-11 | 636 kiB | 1.64 MiB | Michael Biebl |
![]() | rpm | 8.34.0-1.fc28 | 2019-01-14 | 676 kiB | 2.07 MiB | Fedora Project |
![]() | rpm | 8.34.0-1.fc28 | 2019-01-14 | 676 kiB | 2.07 MiB | Fedora Project |
![]() | rpm | 8.37.0-1.fc29 | 2019-01-14 | 629 kiB | 2.23 MiB | Fedora Project |
![]() | rpm | 8.37.0-1.fc29 | 2019-01-14 | 629 kiB | 2.23 MiB | Fedora Project |
![]() | rpm | 8.37.0-1.fc29 | 2019-01-14 | 629 kiB | 2.23 MiB | Fedora Project |
![]() | rpm | 8.37.0-1.fc29 | 2019-01-14 | 629 kiB | 2.23 MiB | Fedora Project |
![]() | rpm | 8.39.0-3.fc30 | 2019-06-17 | 634 kiB | 2.37 MiB | Fedora Project |
![]() | rpm | 8.39.0-3.fc30 | 2019-06-17 | 634 kiB | 2.37 MiB | Fedora Project |
![]() | rpm | 8.39.0-3.fc30 | 2019-06-17 | 634 kiB | 2.37 MiB | Fedora Project |
![]() | rpm | 8.1907.0-2.fc31 | 2020-01-07 | 687 kiB | 2.33 MiB | Fedora Project |
![]() | rpm | 8.1907.0-2.fc31 | 2020-01-07 | 687 kiB | 2.33 MiB | Fedora Project |
![]() | rpm | 8.2001.0-1.fc32 | 2020-02-04 | 737 kiB | 2.51 MiB | Fedora Project |
![]() | rpm | 8.2001.0-1.fc32 | 2020-02-04 | 737 kiB | 2.51 MiB | Fedora Project |
![]() | rpm | 8.33.1-lp150.1.1 | 2019-01-17 | 690 kiB | 2.13 MiB | https://bugs.opensuse.org |
![]() | rpm | 8.33.1-lp150.2.6.1 | 2019-02-01 | 690 kiB | 2.12 MiB | http://bugs.opensuse.org |
![]() | rpm | 8.33.1-lp150.2.3.2 | 2019-01-18 | 690 kiB | 2.13 MiB | http://bugs.opensuse.org |
![]() | rpm | 8.33.1-lp150.2.19.1 | 2019-11-13 | 626 kiB | 2.15 MiB | http://bugs.opensuse.org |
![]() | rpm | 8.33.1-lp150.2.16.1 | 2019-09-24 | 625 kiB | 2.15 MiB | http://bugs.opensuse.org |
![]() | rpm | 8.33.1-lp150.2.13.1 | 2019-08-19 | 618 kiB | 2.13 MiB | http://bugs.opensuse.org |
![]() | rpm | 8.33.1-lp150.2.10.2 | 2019-04-02 | 690 kiB | 2.12 MiB | http://bugs.opensuse.org |
![]() | rpm | 8.33.1-lp151.5.1 | 2019-03-30 | 689 kiB | 2.13 MiB | https://bugs.opensuse.org |
![]() | rpm | 8.33.1-lp151.6.6.1 | 2019-09-16 | 625 kiB | 2.15 MiB | http://bugs.opensuse.org |
![]() | rpm | 8.33.1-lp151.6.3.1 | 2019-08-19 | 618 kiB | 2.13 MiB | http://bugs.opensuse.org |
![]() | rpm | 8.33.1-lp151.6.10.1 | 2019-11-14 | 626 kiB | 2.15 MiB | http://bugs.opensuse.org |
![]() | rpm | 8.39.0-lp152.2.5 | 2020-01-07 | 662 kiB | 2.29 MiB | https://bugs.opensuse.org |
![]() | rpm | 8.24.0-1.3 | 2019-01-17 | 608 kiB | 1.93 MiB | http://bugs.opensuse.org |
![]() | rpm | 8.24.0-2.7.1 | 2019-01-21 | 610 kiB | 1.93 MiB | http://bugs.opensuse.org |
![]() | rpm | 8.24.0-2.3.1 | 2019-01-21 | 609 kiB | 1.93 MiB | http://bugs.opensuse.org |
![]() | rpm | 8.24.0-2.16.1 | 2019-06-27 | 610 kiB | 1.92 MiB | http://bugs.opensuse.org |
![]() | rpm | 8.24.0-2.13.1 | 2019-06-17 | 609 kiB | 1.92 MiB | http://bugs.opensuse.org |
![]() | rpm | 8.24.0-2.10.1 | 2019-02-08 | 609 kiB | 1.92 MiB | http://bugs.opensuse.org |
![]() | rpm | 8.39.0-6.1 | 2020-02-21 | 629 kiB | 2.44 MiB | https://bugs.opensuse.org |
![]() | deb | 8.16.0-1ubuntu9 | 2017-11-10 | 363 kiB | 1.29 MiB | Ubuntu Developers |
![]() | deb | 8.32.0-1ubuntu4 | 2018-06-12 | 402 kiB | 1.4 MiB | Ubuntu Developers |
![]() | deb | 8.32.0-1ubuntu4.1 | 2019-10-30 | 402 kiB | 1.4 MiB | Ubuntu Developers |
![]() | deb | 8.32.0-1ubuntu5 | 2019-01-14 | 402 kiB | 1.4 MiB | Ubuntu Developers |
![]() | deb | 8.32.0-1ubuntu7 | 2019-03-20 | 402 kiB | 1.52 MiB | Ubuntu Developers |
![]() | deb | 8.32.0-1ubuntu7.1 | 2019-10-30 | 402 kiB | 1.52 MiB | Ubuntu Developers |
![]() | deb | 8.1901.0-1ubuntu4 | 2019-09-06 | 410 kiB | 1.59 MiB | Ubuntu Developers |
![]() | deb | 8.2001.0-1ubuntu1 | 2020-02-12 | 417 kiB | 1.62 MiB | Ubuntu Developers |
![]() | deb | 8.16.0-1ubuntu3 | 2017-11-10 | 356 kiB | 1.27 MiB | Ubuntu Developers |
![]() | deb | 8.16.0-1ubuntu3.1 | 2019-04-01 | 357 kiB | 1.27 MiB | Ubuntu Developers |
Manual pages
rsyslog.conf(5)
rsyslog.conf - rsyslogd(8) configuration file
rsyslogd(8)
rsyslogd - reliable and extended syslogd
Latest updates

CentOS 7.7.1908 updates: Updated from 8.24.0-41.el7_7.2 to 8.24.0-41.el7_7.4
2020-03-18
RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
resolves: rhbz#1725067

OpenSUSE Tumbleweed oss: Updated from 8.39.0-5.1 to 8.39.0-6.1
2020-02-21
- Add support for omkafka which is now in Factory, and 15.x repos

Ubuntu 20.04 focal-proposed/main: Version 8.2001.0-1ubuntu1 removed
2020-02-12

Ubuntu 20.04 focal/main: Updated from 8.1901.0-1ubuntu4 to 8.2001.0-1ubuntu1
2020-02-12
Christian Ehrhardt
- Merge with Debian unstable (LP: #1862762). Remaining changes:
- debian/00rsyslog.conf Install tmpfiles.d snippet to ensure that the syslog group can write into /var/log/.
- debian/50-default.conf: set of default rules for syslog
- debian/50-default.conf: separated default rules
- d/rsyslog.install: install default rules
- d/rsyslog.postrm: clear default rules on purge
- d/rsyslog.postrm: remove conf file in postrm on purge. manage with ucf
- d/rsyslog.postinst: Adapt script to use ucf for Ubuntu's config files
- debian/control: Add Depends for ucf
- debian/rsyslog.conf:
- enable $RepeatedMsgReduction to avoid bloating the syslog file.
- enable $KLogPermitNonKernelFacility for non-kernel klog messages
- Run as rsyslog:rsyslog, set $FileOwner to syslog
- Remove rules moved to 50-default.conf
- Add disabled by default AppArmor profile, debian/usr.sbin.rsyslogd
- d/rsyslog.install: install apparmor rule
- d/rules: use dh_apparmor to install profile before rsyslog is started
- d/control: suggests apparmor (>= 2.3)
- d/contrl: Build-Depends on dh-apparmor
- debian/rsyslog.dirs: install /etc/apparmor.d/force-complain, /etc/apparmor.d/disable and /etc/apparmor.d/local
- d/usr.sbin.rsyslogd apparmor profile for rsyslogd
- debian/rsyslog.preinst: disable profile on clean installs.
- d/rules: Fix LDFLAGS to avoid segfault on receipt of first message
- Drop mmnormalize module, which depends on liblognorm from universe.
- d/rules: drop --enable-mmnormalize
- d/control: drop build dependency on liblognorm-dev
- run as user syslog
- d/rsyslog.postinst: fix ownership of /var/spool/rsyslog.
- d/rsyslog.postinst: Create syslog user and add it to adm group
- d/rsyslog.postinst: Adapt privileges for /var/log
- debian/control: Add Depends for adduser
- debian/dmesg.service: provide /var/log/dmesg.log as non log-rotated log for boot-time kernel messages.
- debian/clean: Delete some files left over by the test suite
- Dropped Changes:
- d/control: drop rsyslog-mongodb package from suggests
This part was forgotten to be droped in 8.32.0-1ubuntu1
- d/rules: Build with --disable-silent-rules to get useful build logs.
was a no-op as verbose is the default
- d/rsyslog.postinst: Clean up temporary syslog.service symlink
Formerly missing in Changelog, now gone in Debian as well
Simon Deziel- d/usr.sbin.rsyslogd: apparmor: fix typo in rule for (LP: #1827253).
- d/control: drop rsyslog-mongodb package from suggests

Ubuntu 20.04 focal-proposed/main: Version 8.2001.0-1ubuntu1 introduced
2020-02-12
Christian Ehrhardt
- Merge with Debian unstable (LP: #1862762). Remaining changes:
- debian/00rsyslog.conf Install tmpfiles.d snippet to ensure that the syslog group can write into /var/log/.
- debian/50-default.conf: set of default rules for syslog
- debian/50-default.conf: separated default rules
- d/rsyslog.install: install default rules
- d/rsyslog.postrm: clear default rules on purge
- d/rsyslog.postrm: remove conf file in postrm on purge. manage with ucf
- d/rsyslog.postinst: Adapt script to use ucf for Ubuntu's config files
- debian/control: Add Depends for ucf
- debian/rsyslog.conf:
- enable $RepeatedMsgReduction to avoid bloating the syslog file.
- enable $KLogPermitNonKernelFacility for non-kernel klog messages
- Run as rsyslog:rsyslog, set $FileOwner to syslog
- Remove rules moved to 50-default.conf
- Add disabled by default AppArmor profile, debian/usr.sbin.rsyslogd
- d/rsyslog.install: install apparmor rule
- d/rules: use dh_apparmor to install profile before rsyslog is started
- d/control: suggests apparmor (>= 2.3)
- d/contrl: Build-Depends on dh-apparmor
- debian/rsyslog.dirs: install /etc/apparmor.d/force-complain, /etc/apparmor.d/disable and /etc/apparmor.d/local
- d/usr.sbin.rsyslogd apparmor profile for rsyslogd
- debian/rsyslog.preinst: disable profile on clean installs.
- d/rules: Fix LDFLAGS to avoid segfault on receipt of first message
- Drop mmnormalize module, which depends on liblognorm from universe.
- d/rules: drop --enable-mmnormalize
- d/control: drop build dependency on liblognorm-dev
- run as user syslog
- d/rsyslog.postinst: fix ownership of /var/spool/rsyslog.
- d/rsyslog.postinst: Create syslog user and add it to adm group
- d/rsyslog.postinst: Adapt privileges for /var/log
- debian/control: Add Depends for adduser
- debian/dmesg.service: provide /var/log/dmesg.log as non log-rotated log for boot-time kernel messages.
- debian/clean: Delete some files left over by the test suite
- Dropped Changes:
- d/control: drop rsyslog-mongodb package from suggests
This part was forgotten to be droped in 8.32.0-1ubuntu1
- d/rules: Build with --disable-silent-rules to get useful build logs.
was a no-op as verbose is the default
- d/rsyslog.postinst: Clean up temporary syslog.service symlink
Formerly missing in Changelog, now gone in Debian as well
Simon Deziel- d/usr.sbin.rsyslogd: apparmor: fix typo in rule for (LP: #1827253).
- d/control: drop rsyslog-mongodb package from suggests

OpenSUSE Tumbleweed oss: Updated from 8.39.0-4.2 to 8.39.0-5.1
2020-02-09
- avoid build error with gcc flag -fno-common (bsc#1160414)
- add 0001-satisfy-gcc-flag-fno-common.patch

Fedora rawhide development/Everything-os: Updated from 8.1911.0-1.fc32 to 8.2001.0-1.fc32
2020-02-04
- rebase to upstream version 8.2001.0
resolves: rhbz#1790731

Fedora rawhide development/Server-os: Updated from 8.1911.0-1.fc32 to 8.2001.0-1.fc32
2020-02-04
- rebase to upstream version 8.2001.0
resolves: rhbz#1790731

Fedora 31 releases/Server-os: Version 8.1907.0-2.fc31 introduced
2020-01-07

Fedora 31 releases/Everything-os: Version 8.1907.0-2.fc31 introduced
2020-01-07

OpenSUSE Leap 15.2 oss: Version 8.39.0-lp152.2.5 introduced
2020-01-07
- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld, see [1].

CentOS 7.7.1908 updates: Version 8.24.0-41.el7_7.2 introduced
2020-01-07
RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
resolves: rhbz#1725067

CentOS 7.7.1908 os: Version 8.24.0-38.el7 introduced
2020-01-07
RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow with too long paths
resolves: rhbz#1656860

Ubuntu 20.04 focal/main: Version 8.1901.0-1ubuntu4 introduced
2020-01-07
- No-change upload with strops.h and sys/strops.h removed in glibc.

OpenSUSE Tumbleweed oss: Updated from 8.39.0-4.1 to 8.39.0-4.2
2019-11-18
- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld, see [1].

Fedora rawhide development/Server-os: Updated from 8.1910.0-1.fc32 to 8.1911.0-1.fc32
2019-11-16
- rebase to upstream version 8.1911.0
resolves: rhbz#1771468

Fedora rawhide development/Everything-os: Updated from 8.1910.0-1.fc32 to 8.1911.0-1.fc32
2019-11-16
- rebase to upstream version 8.1911.0
resolves: rhbz#1771468

OpenSUSE Leap 15.1 update/oss: Updated from 8.33.1-lp151.6.6.1 to 8.33.1-lp151.6.10.1
2019-11-14
- avoid SEGFAULT due to a mutex double-unlock in iminternal module (bsc#1141063)
- add 0001-iminternal-suppress-mutex-double-unlock.patch
- fix potential misaddressing in pmaixforwardedfrom (CVE-2019-17041, bsc#1153451)
- add 0001-pmaixforwardedfrom-bugfix-potential-misadressing.patch
- fix potential misaddressing in pmcisconames (CVE-2019-17042, bsc#1153459)
- add 0001-pmcisconames-bugfix-potential-misadressing.patch

OpenSUSE Leap 15.0 update/oss: Updated from 8.33.1-lp150.2.16.1 to 8.33.1-lp150.2.19.1
2019-11-13
- avoid SEGFAULT due to a mutex double-unlock in iminternal module (bsc#1141063)
- add 0001-iminternal-suppress-mutex-double-unlock.patch
- fix potential misaddressing in pmaixforwardedfrom (CVE-2019-17041, bsc#1153451)
- add 0001-pmaixforwardedfrom-bugfix-potential-misadressing.patch
- fix potential misaddressing in pmcisconames (CVE-2019-17042, bsc#1153459)
- add 0001-pmcisconames-bugfix-potential-misadressing.patch

Ubuntu 18.04 LTS bionic-proposed/main: Version 8.32.0-1ubuntu4.1 introduced
2019-10-30
Simon Deziel
- d/usr.sbin.rsyslogd: allow reading/mmap'ing rsyslog binary This is required for usage inside containers (LP: #1827253)
Related packages
rsyslog-crypto - Encryption support
rsyslog-crypto-debuginfo - Debug information for package rsyslog-crypto
rsyslog-czmq - ZeroMQ protocol support for rsyslog via CZMQ
rsyslog-debuginfo - Debug information for package rsyslog
rsyslog-debugsource - Debug sources for package rsyslog
rsyslog-diag-tools - Diagnostic tools
rsyslog-diag-tools-debuginfo - Debug information for package rsyslog-diag-tools
rsyslog-doc - HTML documentation for rsyslog
rsyslog-elasticsearch - Elasticsearch output plugin for rsyslog
rsyslog-elasticsearch-debuginfo - Debug information for package rsyslog-elasticsearch
rsyslog-gnutls - TLS protocol support for rsyslog (GnuTLS)
rsyslog-gnutls-debuginfo - Debug information for package rsyslog-gnutls
rsyslog-gssapi - GSSAPI authentication and encryption support for rsyslog
rsyslog-gssapi-debuginfo - Debug information for package rsyslog-gssapi
rsyslog-hiredis - Redis output plugin for rsyslog
rsyslog-hiredis-debuginfo - Debug information for package rsyslog-hiredis
rsyslog-kafka - Apache Kafka support for rsyslog
rsyslog-kafka-debuginfo - Debug information for package rsyslog-kafka
rsyslog-libdbi - Libdbi database support for rsyslog
rsyslog-libdbi-debuginfo - Debug information for package rsyslog-libdbi
rsyslog-mmaudit - Message modification module supporting Linux audit format
rsyslog-mmaudit-debuginfo - Debug information for package rsyslog-mmaudit
rsyslog-mmjsonparse - JSON enhanced logging support
rsyslog-mmjsonparse-debuginfo - Debug information for package rsyslog-mmjsonparse
rsyslog-mmkubernetes - Provides the mmkubernetes module
rsyslog-mmkubernetes-debuginfo - Debug information for package rsyslog-mmkubernetes
rsyslog-mmnormalize - Log normalization support for rsyslog
rsyslog-mmnormalize-debuginfo - Debug information for package rsyslog-mmnormalize
rsyslog-mmsnmptrapd - Message modification module for snmptrapd generated messages
rsyslog-mmsnmptrapd-debuginfo - Debug information for package rsyslog-mmsnmptrapd
rsyslog-module-dbi - Database support via DBI
rsyslog-module-dbi-debuginfo - Debug information for package rsyslog-module-dbi
rsyslog-module-elasticsearch - ElasticSearch output module for syslog
rsyslog-module-elasticsearch-debuginfo - Debug information for package rsyslog-module-elasticsearch
rsyslog-module-gcrypt - Libgcrypt log file encryption support module for rsyslog
rsyslog-module-gcrypt-debuginfo - Debug information for package rsyslog-module-gcrypt
rsyslog-module-gssapi - GSS-API support module for rsyslog
rsyslog-module-gssapi-debuginfo - Debug information for package rsyslog-module-gssapi
rsyslog-module-gtls - TLS encryption support module for rsyslog
rsyslog-module-gtls-debuginfo - Debug information for package rsyslog-module-gtls
rsyslog-module-guardtime - GuardTime log file signing support module for rsyslog
rsyslog-module-guardtime-debuginfo - Debug information for package rsyslog-module-guardtime
rsyslog-module-kafka - Kafka support module for syslog
rsyslog-module-kafka-debuginfo - Debug information for package rsyslog-module-kafka
rsyslog-module-mmnormalize - Contains the mmnormalize support module for syslog
rsyslog-module-mmnormalize-debuginfo - Debug information for package rsyslog-module-mmnormalize
rsyslog-module-mysql - MySQL support module for rsyslog
rsyslog-module-mysql-debuginfo - Debug information for package rsyslog-module-mysql
rsyslog-module-omamqp1 - AMQP support module for syslog
rsyslog-module-omamqp1-debuginfo - Debug information for package rsyslog-module-omamqp1
rsyslog-module-omhttpfs - HDFS via HTTP output module for syslog
rsyslog-module-omhttpfs-debuginfo - Debug information for package rsyslog-module-omhttpfs
rsyslog-module-omtcl - TCL output module for rsyslog
rsyslog-module-omtcl-debuginfo - Debug information for package rsyslog-module-omtcl
rsyslog-module-ossl - TLS encryption support module for rsyslog
rsyslog-module-ossl-debuginfo - Debug information for package rsyslog-module-ossl
rsyslog-module-pgsql - PostgreSQL support module for rsyslog
rsyslog-module-pgsql-debuginfo - Debug information for package rsyslog-module-pgsql
rsyslog-module-relp - RELP protocol support module for syslog
rsyslog-module-relp-debuginfo - Debug information for package rsyslog-module-relp
rsyslog-module-snmp - SNMP support module for rsyslog
rsyslog-module-snmp-debuginfo - Debug information for package rsyslog-module-snmp
rsyslog-module-udpspoof - UDP spoof support module for syslog
rsyslog-module-udpspoof-debuginfo - Debug information for package rsyslog-module-udpspoof
rsyslog-mongodb - MongoDB output plugin for rsyslog
rsyslog-mongodb-debuginfo - Debug information for package rsyslog-mongodb
rsyslog-mysql - MySQL output plugin for rsyslog
rsyslog-mysql-debuginfo - Debug information for package rsyslog-mysql
rsyslog-omamqp1 - Provides the omamqp1 module
rsyslog-omamqp1-debuginfo - Debug information for package rsyslog-omamqp1
rsyslog-openssl - TLS protocol support for rsyslog (OpenSSL)
rsyslog-pgsql - PostgreSQL output plugin for rsyslog
rsyslog-pgsql-debuginfo - Debug information for package rsyslog-pgsql
rsyslog-rabbitmq - RabbitMQ support for rsyslog
rsyslog-rabbitmq-debuginfo - Debug information for package rsyslog-rabbitmq
rsyslog-relp - RELP protocol support for rsyslog
rsyslog-relp-debuginfo - Debug information for package rsyslog-relp
rsyslog-snmp - SNMP protocol support for rsyslog
rsyslog-snmp-debuginfo - Debug information for package rsyslog-snmp
rsyslog-udpspoof - Provides the omudpspoof module
rsyslog-udpspoof-debuginfo - Debug information for package rsyslog-udpspoof