- Home
- Telemetry Pipeline Software
- syslog-ng
syslog-ng
syslog-ng · Aliso Viejo, California, United States · founded 2016
What it is
syslog-ng collects logs from infrastructure, processes them, and routes or stores them for analysis. Its Open Source Edition can collect, parse, classify, rewrite, and correlate logs before sending them to analysis tools or storing them. Premium Edition adds filtering and real-time pattern correlation to help reduce and normalize log data, along with disk buffering, client-side failover, and application-layer acknowledgement for transfer reliability. It supports encrypted transfer and storage, with X.509 certificates for mutual host and server authentication. Store Box provides access-controlled log search and custom reports that can help with compliance work. Listed destinations include Elasticsearch, Hadoop, Kafka, MongoDB, SQL databases, Redis, Splunk, and SIEM tools. The product is self-hosted; listed platforms include Linux, macOS, Windows, and API. Open Source Edition is free under GPL/LGPL licensing and community supported. Commercial customers can access certified engineers and support services, while open-source users are directed to community support and documentation.
For and against
For
- Free GPL/LGPL Open Source Edition
- Log processing and multi-destination routing
- Premium Edition supports encrypted transfer and storage
- Store Box offers access-controlled log search
- Free trials for Premium Edition and Store Box
Against
- Open Source Edition relies on community support
- Store Box stores up to 10 TB uncompressed
The verdict
syslog-ng offers a free open-source option alongside commercial log-processing and storage products. The editions differ in features and support, so buyers should identify which capabilities their deployment requires.
Who it suits
It suits teams that need to collect, process, and route infrastructure logs in a self-hosted setup. Open Source Edition may suit users who can rely on community support, while commercial customers can access support services.
Plans and prices
syslog-ng Open Source Edition
GPL/LGPL source · self-hosted · community support
Read 15 Oct 2026 · syslog-ng.com
syslog-ng Premium Edition trial
encrypted logstore · enrichment · zero-message-loss transfer · Hadoop/Elasticsearch destinations
Read 15 Oct 2026 · syslog-ng.com
Syslog-ng Basic
Capterra-listed entry plan
Read 15 Oct 2026 · capterra.com
syslog-ng Premium Edition
commercial support · Windows and multi-platform binaries · enterprise features
Read 15 Oct 2026 · syslog-ng.com
syslog-ng Premium Edition Marketplace
Microsoft Marketplace listing
Read 15 Oct 2026 · marketplace.microsoft.com
syslog-ng Store Box
Licensing based on Log Source Hosts and hardware configuration · no license limits on amount or rate of data processed or stored
Read 5 Oct 2026 · syslog-ng.com
On the record
- Analytics integrations
- Native or documented outputs include Elasticsearch, HDFS, Hadoop, Graphite, Redis, Riemann, Google BigQuery, Google Pub/Sub, S3, Slack and Splunk HEC.syslog-ng.github.io · read 15 Oct 2026
- Centralized logging
- The Open Source Edition is documented as a flexible, scalable centralized logging system with parsing, filtering, rewriting, correlation and enrichment.syslog-ng.github.io · read 15 Oct 2026
- Company incorporation
- The UK One Identity legal entity was incorporated in 2016, according to Companies House.find-and-update.company-information.service.gov.uk · read 15 Oct 2026
- Company legal name
- Crunchbase lists the maker as One Identity LLC, a private company headquartered in Aliso Viejo, California, with 501–1,000 employees.crunchbase.com · read 15 Oct 2026
- Company profile
- LinkedIn lists One Identity as a privately held software-development company headquartered at 4 Polaris Way, Aliso Viejo, California, with 501–1,000 employees.linkedin.com · read 15 Oct 2026
- Compliance
- Commercial documentation describes logstore and reliable transfer features as helping with SOX, HIPAA and PCI-DSS collection requirements.syslog-ng.github.io · read 15 Oct 2026
- Compliance reporting
- Store Box provides access-controlled log search and custom reports that can help demonstrate compliance with PCI-DSS, ISO 27001, SOX, and HIPAA.syslog-ng.com · read 5 Oct 2026
- Database integrations
- Documented database destinations include MongoDB, Microsoft SQL Server, MySQL, Oracle, PostgreSQL and SQLite.syslog-ng.github.io · read 15 Oct 2026
- Developer documentation
- A separate developer guide covers plugin modules, source drivers, parsers, filters, template functions, Python destinations and Java destinations.syslog-ng.github.io · read 15 Oct 2026
- Documentation depth
- The documentation center contains searchable administration and developer guides, contribution instructions, mailing-list support and GitHub issue tracking.syslog-ng.github.io · read 15 Oct 2026
- Encrypted storage
- Premium Edition logstore files are encrypted, compressed, indexed and timestamped, with timestamping authorities supported.syslog-ng.com · read 15 Oct 2026
- Installation
- OSE can be installed from Debian/Ubuntu, RHEL, Fedora and Arch packages, official repositories, Docker images or source compilation.syslog-ng.github.io · read 15 Oct 2026
- Integrations
- The product pages list destinations and integrations including Elasticsearch, Hadoop, Kafka, MongoDB, SQL databases, Redis, Splunk, and SIEM tools.syslog-ng.com · read 5 Oct 2026
- License
- The public project combines LGPL and GPL licensing: core reusable code is generally LGPL 2.1-or-later while many modules are GPLv2-or-later.github.com · read 15 Oct 2026
- Limit: GUI and observability
- PeerSpot reviewers request a graphical interface, stronger observability and improved filtering or integration breadth, and some say it is not a full SIEM.peerspot.com · read 15 Oct 2026
- Limit: learning curve
- Capterra reviewers say the configuration syntax takes time to learn, and one reviewer saw little extra functionality over basic operating-system syslog.capterra.com · read 15 Oct 2026
- Log transformation
- Premium Edition supports filtering, parsing, rewriting, classification, and real-time pattern correlation to reduce and normalize log data.syslog-ng.com · read 5 Oct 2026
- Notable limits
- Store Box can store up to 10 terabytes of uncompressed data on its largest appliance, according to the product page.syslog-ng.com · read 5 Oct 2026
