Linux syslog may be on way out

Nov 23, 2011, 20:00 (16 Talkback[s])
(Other stories by Brian Proffitt)

[ Thanks to Amy Bennett for this link. ]

In an effort to foil crackers attempts to cover their tracks by altering text-based syslogs, as well as improve the syslog process as a whole, two Red Hat developers are proposing a new binary-based tool called The Journal that could replace the syslog daemon in as early as the Fedora 17 release.

And believe you me, some people are less than enthused by the proposed solution.

Developers Lennart Poettering and Kay Sievers are proposing that the current 30-year-old syslog system is inefficient and too easy to misread and hack to properly perform even its most basic function: store a log of system events on a given Linux box.

Complete Story

Related Stories:

• Building A Central Loghost On CentOS And RHEL 5 With rsyslog(Jan 20, 2011)
• A licensing change for syslog-ng(Sep 10, 2010)
• Centralized LOG with rSyslog recording in MySQL DB and Web UI for queries(Sep 30, 2009)
• Troubleshooting Linux using syslog.conf(Jan 13, 2008)
• Splunking with VMware and syslog on Linux(Jan 09, 2008)
• Linux.com: Interview: syslog-ng 2.0 developer Balázs Scheidler(Dec 15, 2006)