Releases/FeatureRsyslog

= rsyslog =

Replace sysklogd with rsyslog as the default.

Owner

 * Name: PeterVrabec

Current status

 * Targeted release:  Fedora 8
 * Last updated: 2007-08-22
 * Percentage of completion: 100%

Latest SRPMS/specs can be found at:
 * http://people.redhat.com/pvrabec/rpms/rsyslog/rsyslog-1.19.0-1.src.rpm

Review request


 * http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=243831

Usage cases/rationale
As you may notice, sysklogd upstream seems dead with no new developments being released. However, there are a lot of new features that people would like to have and are asking for:


 * 1) TCP based network transport for log messages.
 * 2) Secure transport over the network.
 * 3) A realtime analysis framework for logmessages (e.g. to launch programs on alerts).
 * 4) Database backend.
 * 5) Rule (pattern) based de-multiplexing of log messages (e.g. logging to different files based on regexp).
 * 6) Backward compatibility with existing syslog configuration

rsyslog is the package that comes closest to meet this requirements. It has an active upstream and it is backwards compatible since its forked from the current default daemon. It has a bunch of features that you may want to look at:


 * http://www.rsyslog.com/module-Static_Docs-view-f-features.html.phtml

Why Not Syslog-ng?

 * https://www.redhat.com/archives/fedora-devel-list/2007-June/msg02385.html
 * Code Complexity
 * Performance issues
 * Incompatible format
 * Dual licensing model where adding features available in the other version might cause friction with upstream.

Scope
testing, bugfixing, implementing new features.

Test Plan

 * 1) Test that introduced rsyslog package replaces sysklogd properly.
 * 2) Test all features you want to see in the new rsyslog in F8 and speak up if you miss any.

Dependencies
Same dependencies as in sysklogd.

Documentation

 * http://www.rsyslog.com/module-Static_Docs-view-f-manual.html.phtml