rsyslog/rsyslog
FreeHigh-performance log ingestion and ETL engine
FreeFree tier
About rsyslog/rsyslog
Rsyslog is a rocket-fast system for log processing pipelines. It offers high performance, advanced security features, and a modular microkernel-like architecture. Originally a regular syslogd, rsyslog has evolved into a highly versatile logging solution capable of ingesting data from numerous sources, transforming it, and outputting it to a wide variety of destinations. It can deliver over one million messages per second to local destinations under minimal processing. The project also provides an experimental AI assistant (rsyslog Assistant) for configuration help and supports both Linux and Windows platforms.
Key Features
Rocket-fast log processing (over 1M messages/sec under minimal processing)
Modular microkernel-like architecture for extensibility
Advanced security features
Ingests data from numerous sources (syslog, files, network, etc.)
Transforms and outputs logs to a wide variety of destinations
Experimental AI-powered assistant (rsyslog Assistant) for configuration help
Available for both Linux and Windows (including Windows Agent)
Pros & Cons
Pros
- Proven high performance with over 1 million messages per second
- Open source with a permissive license (GPL/LGPL)
- Modular design allows custom inputs, outputs, and parsers
- Widely adopted with active community and long-term support
- Includes experimental AI assistant for easier configuration
Cons
- Configuration can be complex for advanced pipelines requiring Lua or custom modules
- Experimental AI assistant may occasionally generate incorrect configuration examples
Best For
Centralized log aggregation and managementReal-time log monitoring and analysis pipelinesLog transformation and enrichment for security and complianceHigh-throughput syslog replacement and forwarding
FAQ
What is rsyslog?
Rsyslog is a high-performance log processing engine originally built as a syslogd. It now offers modular architecture, support for numerous input/output sources, and advanced security features.
How fast is rsyslog?
Rsyslog can deliver over one million messages per second to local destinations under minimal processing (based on v7, Dec 2013). Performance remains excellent even with complex routing and remote forwarding.
Is there AI-powered help available for rsyslog?
Yes, the rsyslog Assistant is an experimental AI-powered support tool trained on official docs and changelogs. It can help with configuration and troubleshooting but may occasionally generate incorrect examples.
Is rsyslog open source?
Yes, rsyslog is open source under the GNU General Public License (GPL) and available on GitHub.