- Home
- Telemetry Pipeline Software
- rsyslog
rsyslog
What it is
rsyslog is an open-source engine for collecting, transforming, and routing event data in self-hosted environments. Its pipeline uses inputs, rulesets, and actions to receive messages, filter or process them, and send them to destinations. The project says it can deliver over one million messages per second to local destinations when processing is limited. On-demand disk spooling, backup destinations, and multiple processing threads support reliability. Documented outputs include Elasticsearch, OpenSearch, Apache Kafka, HTTP endpoints, and syslog forwarding. Database outputs include MariaDB/MySQL and PostgreSQL, with libdbi support for other databases. It supports TLS-protected syslog and forwarding with peer authentication settings. Deployment options include source and Git installation, maintained packages for Ubuntu, RHEL/CentOS, and Debian, and Docker. Core programs use GPLv3, while some runtime files are licensed under LGPL. rsyslog is developed for Linux, POSIX, and related UNIX-like systems; it does not run natively on Windows. A separate Windows Agent can collect Windows logs and relay syslog messages to rsyslog on Linux. The core software is free; paid support starts at €1,999 a year.
For and against
For
- Free, open-source core software.
- Routes to databases, Kafka, and HTTP endpoints.
- Supports TLS-protected syslog.
- Offers source, package, Git, and Docker deployment.
- Includes disk spooling and backup destinations.
Against
- Does not run natively on Windows.
- AIX and HP-UX support is listed as upcoming.
- Enterprise support starts at €1,999 a year.
The verdict
rsyslog offers a configurable, self-hosted log pipeline with a broad set of documented destinations and deployment paths. Its native platform scope centers on Linux and related UNIX-like systems, while Windows collection requires a separate agent.
Who it suits
rsyslog suits teams that need self-hosted log collection and routing on Linux or related UNIX-like systems. Windows environments can use the separate Windows Agent to relay collected logs to rsyslog on Linux.
Plans and prices
rsyslog
Open-source Linux/POSIX software · source, Git, and distribution packages
Read 9 Oct 2026 · rsyslog.com
Windows Agent Basic
Per-machine license · Event Log Monitor · 0 remote text file monitor licenses
Read 9 Oct 2026 · rsyslog.com
Windows Agent Professional
Per-machine license · Event Log and text file monitoring · 10 remote text file monitor licenses
Read 9 Oct 2026 · rsyslog.com
Windows Agent Enterprise
Per-machine license · Event Log and text file monitoring · Unlimited remote text file monitor licenses
Read 9 Oct 2026 · rsyslog.com
Enterprise Support
20 max support hours · 5 installations · 1 customer contact · 1–2 business day response
Read 9 Oct 2026 · new.rsyslog.com
Extended Enterprise Support
40 max support hours · 5 installations · 2 customer contacts · 24 hour response on business days
Read 9 Oct 2026 · new.rsyslog.com
Unlimited Enterprise Support
40 max support hours · Unlimited installations · 5 customer contacts · 24 hour response on business days
Read 9 Oct 2026 · new.rsyslog.com
On the record
- Databases
- The feature list describes database outputs for MariaDB/MySQL and PostgreSQL, plus support through libdbi for several other databases.docs.rsyslog.com · read 9 Oct 2026
- Deployment
- The project offers source and Git installation paths, maintained packages for Ubuntu, RHEL/CentOS, and Debian, and a Docker container.rsyslog.com · read 9 Oct 2026
- Integrations
- Documented outputs include Elasticsearch and OpenSearch, Apache Kafka, HTTP endpoints, and syslog forwarding.docs.rsyslog.com · read 9 Oct 2026
- Limit
- The feature list says support for additional Unix variants such as AIX and HP-UX is an upcoming item that needs volunteers.docs.rsyslog.com · read 9 Oct 2026
- Maker
- The rsyslog site is operated by Adiscon GmbH, which identifies itself as rsyslog’s main sponsor.rsyslog.com · read 9 Oct 2026
- Open source
- The project documentation says rsyslog core programs are released under GPLv3, while some runtime files are licensed under LGPL.docs.rsyslog.com · read 9 Oct 2026
- Pipeline
- Its processing model uses inputs, rulesets, and actions to receive, filter, process, and output messages.docs.rsyslog.com · read 9 Oct 2026
- Platform scope
- The documentation says rsyslog does not run natively on Windows and is developed for POSIX, Linux, and related UNIX-like systems.docs.rsyslog.com · read 9 Oct 2026
- Purpose
- rsyslog collects, transforms, and routes event data as a high-performance log processing engine.rsyslog.com · read 9 Oct 2026
- Reliability
- Features include on-demand disk spooling, backup destinations, and multiple processing threads.docs.rsyslog.com · read 9 Oct 2026
- Scale
- The homepage says rsyslog can deliver over one million messages per second to local destinations when limited processing is applied.rsyslog.com · read 9 Oct 2026
- Support
- Community support is available through the mailing list, while Adiscon offers paid enterprise support for business users.rsyslog.com · read 9 Oct 2026
- Transport security
- rsyslog supports TLS-protected syslog and documents TLS forwarding with peer authentication settings.docs.rsyslog.com · read 9 Oct 2026
- Windows collection
- The separate Windows Agent collects Windows Event Logs and local log files and can relay syslog messages to rsyslog on Linux.rsyslog.com · read 9 Oct 2026
