What Is a Syslog Server?

(blog.greencloudvps.com)

15 points by theanonymousone1 hour ago

4 comments

brianjlogan1 hour ago
> A syslog server is a foundational tool for centralized log management in modern IT environmentsI'd very much recommend a more modern log stack than a traditional syslog server.There are many articles covering the limitations of Syslog. Better to replace that component by utilities like OpenTelemetry and JSON structured logging.You can run a single binary version of Loki <a href="https://grafana.com/docs/loki/latest/get-started/deployment-modes/" rel="nofollow">https://grafana.com/docs/loki/latest/get-started/deployment-...</a>Or use something like the Otel collector to send your logs to a remote host.I have done my fair share of rsyslog and syslog-ng.I would not say a "Syslog" server belongs in a modern stack.
- skullone57 minutes ago
 I disagree. I work in a large environment, and rsyslog is where 90% of data goes to first. It can keep up with millions of messages per second, route them to higher order services for indexing (bigquery, splunk, elastic etc etc). Has rules engines, encryption, supports multiple protocols and obviously has TLS too. You can surely augment with otel and such where you can, but syslog is uhhhh, deployed in so many places that it would make an average app developer's head spin when all they're used to is application logging in a controlled structured place in their silo.
- 1970-01-013 minutes ago
 The problem with modern stuff is it doesn't do the very basics. Sometimes I really do want UDP dumping out into a file on another part of the network. The modern setups forget how to do this.
- lokar29 minutes ago
 Yeah, for a modern large scale distributed system both the client api and implementations are pretty bad.
IronWolve1 hour ago
We moved to splunk now and mostly happy with it, mix of windows/linux/etc logs.But with AI, I can see opensource alternatives getting better.
QuinnyPig1 hour ago
"Splunk that runs locally with a worse UX, but on balance doesn't eat all the resources you throw at it and doesn't charge you a kidney."
- brianjlogan1 hour ago
 There's far cheaper alternatives to Splunk that are still a step up from traditional syslog.KubeCon over the last couple of years was showing the market was a glut with Observability vendors which is just time series and log management. (traces are logs with a span id).