syslog-ng Reviews

Name: syslog-ng
Brand: One Identity
Rating: 4 (5 reviews)

4.3 out of 5

5 reviews
100% willing to recommend

What is syslog-ng?UNIXBusinessApplication
Price:

Optimizing SIEM
syslog-ng is the log management solution that improves the performance of your SIEM solution by reducing the amount and improving the quality of data feeding your SIEM.

Get the Log Management Buyer's Guide and find out what your peers are saying about syslog-ng, Splunk Enterprise Security, Datadog and more!

syslog-ng is the #17 ranked solution in Log Management Software. PeerSpot users give syslog-ng an average rating of 8.6 out of 10. syslog-ng is most commonly compared to Splunk Enterprise Security: syslog-ng vs Splunk Enterprise Security. syslog-ng is popular among the large enterprise segment, accounting for 59% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 14% of all views.

Buyer's Guide

Log Management

April 2024

Get the category report

Helped 767,319 peers since 2012

Featured reviews

RyanVargas

Senior Director and Senior Systems Engineer (Dual Role), IT Infrastructure and Security at a financial services firm with 51-200 employees

Feb 13, 2023

I rate syslog-ng 10 out of 10. It's free and easy to use. It has built-in tools that help us index the various logs sent to it. It's a solid log product. If you're looking for a SIEM solution, syslog-ng will work as a stopgap measure at beginning of the project. It can also work as an injector for a true SIEM solution. You can send all the logs to syslog-ng and forward all the data to the SIEM solution after you've cleaned up the data and got the pertinent information. It's a good front end for a commercial SIEM solution, which becomes more expensive as you load more data into it. I would highly recommend syslog-ng for that use case. However, if you lack the expertise, you might need to go with a cloud-based SIEM instead. You need some in-house expertise or an outside consultant to manage it and set it up.

Read full review

FlavioSantos

Data center analyst at Atvos

Aug 30, 2023

We use it for compliance issues, like law enforcement for the Brazilian government For us, the most valuable feature is the use of compound search for searching logs at a specific time, by a specific user, or specific behavior. There is room for improvement in terms of observability.…

Read full review

ShabbeerNasrudeen

Solution Architect(Splunk- Log Management) at Tata Consultancy

Mar 1, 2023

Syslog is mainly used for network logs, and it can be configured to support a number of ports for an IP. From a scalability perspective, a front-end load balancer or other third-party elements can be used to route traffic to syslog. However, syslog will always look for the standard log format. If the format is not up to the standard syslog level, the load balancer will add its own IP to the log and forward it to syslog. To ensure integrity, the log should remain the same, without any changes to the server A IP. If there is a change in the login server A, the load balancer will add its own IP or hostname to the log and forward it to syslog. To address this issue, further investigation is needed to enable the product to overcome this scenario. We have 12 technicians supporting the platform.

Read full review

syslog-ng market share

As of March 2024, the market share of syslog-ng in the Log Management category stands at 5.6%, marking an increase of 118.1% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Log Management

Key learnings from peers

Valuable Features

"For us, the most valuable feature is the use of compound search for searching logs at a specific time, by a specific user, or specific behavior."
"The ability to extract and store the logs is the most valuable feature of syslog-ng."
"Syslog-ng provides easy access to all my logs. It helps me show managers and other clients precisely where an incident occurred. I also like it because you can integrate syslog-ng with multiple solutions to allow real-time monitoring."

Room for Improvement

"There is room for improvement in terms of observability."
"There is always the potential for additional integration and protocol extensions."
"It's hard to find people who know how to use syslog-ng. I often find problems with configurations, and solutions aren't integrated correctly with syslog-ng. For example, there might be data with extra decimals, or the collector agents are incorrectly named. It isn't a problem with the solution; it's a lack of professionals."

Pricing

syslog-ng is open-source and free.

"Syslog-ng is open-source."
"Syslog-ng is a free open-source solution."

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Log Management Buyer's Guide for additional reliable information.

Top industries

By visitors reading reviews

Computer Software Company

14%

Government

13%

Financial Services Firm

Comms Service Provider

Manufacturing Company

Educational Organization

University

Retailer

Energy/Utilities Company

Media Company

Healthcare Company

Insurance Company

Construction Company

Transportation Company

Wholesaler/Distributor

Hospitality Company

Legal Firm

Pharma/Biotech Company

Non Profit

Marketing Services Firm

Real Estate/Law Firm

Outsourcing Company

Performing Arts

Aerospace/Defense Firm

Recreational Facilities/Services Company

Logistics Company

Engineering Company

Compare syslog-ng with alternative products

Learn more about syslog-ng

Rapid search and troubleshooting
With syslog-ng Store Box, you can find the answer. Search billions of logs in seconds using full text queries with Boolean operators to pinpoint critical logs.

Meeting compliance requirements
syslog-ng Store Box provides secure, tamper-proof storage and custom reporting to demonstrate compliance.

Big data ingestion
syslog-ng can deliver data from a wide variety of sources to Hadoop, Elasticsearch, MongoDB, and Kafka as well as many others.

Universal log collection and routing
syslog-ng flexibly routes log data from X sources to Y destinations. Instead of deploying multiple agents on hosts, organizations can unify their log data collection and management.

Secure data archive
syslog-ng Store Box provides automated archiving, tamper-proof encrypted storage, granular access controls to protect log data. The largest appliance can store up to 10TB of raw logs.