sysklogd v2.7.0

Caution

This release implicitly changes the behavior of forwarded messages. By default, all outbound messages (each has only one syslog line) to remote syslog servers are now capped to 1024 bytes total.

See the full log of changes below and the documentation, the program manual pages, for more information.

Changes

• syslogd by default now cap forwarded messages to 1024 bytes. This can be adjusted using -M size or the config file setting udp_size. See the documentation for more information and reasoning behind this
• syslogd socket buffering has been reduced from 160 kiB to 80 kiB
• Allow slashes in process names to support, e.g., postfix/qmgr
• Support for extended message filtering based on tag/ident, hostname, or message property. This allows sorting of messages based on their origin (program/remote) or content in any of the available message fields: exact match, case-insensitive substring matching or extended regular expression
• Support for remote logging to a multicast group, as well as acting as a multicast group receiver of syslog messages, both IPv4 and IPv6. Forwarding to multicast groups support two new, per action, options:
  • iface=IFNAME to set a different outbound interface
  • ttl=1.255 to adjust the TTL of outbound multicast (default: 1)
• Client support for controlling egressing multicast, two new members in struct syslog_data: .log_iface and .log_ttl in libsyslog.a, for details, see above
• Bump libsyslog.a ABI version: 0.1.0 -> 0.2.0
• logger support for controlling egressing multicast using a new command line option, -o iface=IFNAME,ttl=<1..255>

Fixes

• syslogd now logs the hostname as the FQDN in RFC5424 output format
• Fix #90 (reopened): parsing of IPv6 addresses in listen .conf file directive, as well as the command line option -b, is broken. The format -b [A:B:C:D]:PORT is now correctly parsed

sysklogd v2.6.2

Changes

• syslog.conf: misplaced continuation character in example
• Adapt facilities for RFC5424 compliance. Add aliases for the standard
  LOG_CRON2 and LOG_AUDIT, including facilitynames[], issue #86
• Add support for IPv6 addresses in listen directive, issue #90

Fixes

• Fix #85: logging to remote IPv6 address does not work. Add support
  for parsing [fdd5::6979:c0ff:ee87:8f92]:123 style addresses
• Fix #88: initial delay for unresolvable remote target. When a DNS
  name cannot be resolved, e.g., critically at boot, syslogd was
  blocked with default resolver timeout (5 * 2 sec)
• Fix #89: data corruption using the listen directive in .conf files

sysklogd v2.6.1

Changes

• Read .conf files from include directories sorted alphabetically

Fixes

• Add extra linefeed to wall messages to ensure they are seen
• Issue #87: segfault on SIGTERM, regression from v2.6.0

sysklogd v2.6.0

Changes

• Add reload command for systemd service, by Paweł Jasiak
• Add global log rotation options to .conf file, issue #80. Introducing two new settings: rotate_size SIZE and rotate_count COUNT
• Semantic change for per-file log rotation settings, no longer possible to disable log rotation for a file by setting rotate=0:0
• Possible to set only size or count rotation per file
• Add support for listen addr:port to .conf file, issue #83

Fixes

• Fix #72: loss of raw kernel log messages to console. This adds a new command line flag -l to keep kernel logs to console. A feature requested by embedded Linux users who often navigate issues by console output

  With properly configured kernel logging, e.g., quiet, only error and above in severity is logged by the kernel directly to the console. So for most users this would be a useful behavior

• Fix #81: blocking delay for unresolvable remote log server. If DNS name is used as remote log server, the system may not be able to resolve it to an IP address (for various reasons). This may lead to blocking delays in syslogd causing loss of log messages

• Fix #82: retry creating UNIX and network sockets on failure. This now allows syslogd to "discover" and bind to addresses that are not yet set when it starts up

sysklogd v2.5.2

Minor fix release.

Fixes

• Issue #67: restore support for reading kernel logs from /proc/kmsg,
  regression introduced in v2.4.0, issue #48.

sysklogd v2.5.1

Minor fix release.

Fixes

• Issue #37: improved accuracy of the MARK timer, optional, default: 20
  minutes. Generates log messages to files, which have had no activity
  within the MARK interval. Was off by up to interval / 2 minutes.
  It may now be off by up to 1 / 2 minutes, i.e.g, 30 seconds.
• Issue #64: sub-second faking of kernel timestamps was always zero

sysklogd v2.5.0

Changes

• Issue #59: initial port to NuttX, contributed by Xiaomi
• Issue #61: add support for -c and -cc to disable log compression.
  A single -c disables compression for pipes, another -c (or -cc)
  disables compression for all other log targets
• The default syslog.conf now logs debug messages again (disabled in
  v2.4.0) due to problems (confusion) reported in the field
• Dropped not recommended KillMode=process from systemd unit file

Fixes

• Issue #60: document how to set side-wide permissions on log files
• Issue #62: early log messages lost when running under systemd, found
  by Wind River Systems, including initial fix

sysklogd v2.4.4

Fixes

• Fix #58: running syslogd with -T should use local time for remote
  messages, but time is always logged with "Jan 0 00:00:00".

sysklogd v2.4.3

Changes

• Ensure output from syslogd -v and logger -v is the same, so
  that the project origin is the same, and that both use stdout

Fixes

• Fix #57: garbled tag name in std (RFC3164) log file output

sysklogd v2.4.2

Fixes

• Fix logger default severity, use .notice, like other logger
  implementations. Was .info, which is of lesser severity, affecting
  some use-cases negatively (loss of logs)
• Drop extra leading space in log message in libsyslog RFC3164 format,
  two spaces between proc[pid]:, or plain :, and the message
• Drop trailing space in logger messages read from command line