Syslog Settings

LogZilla documentation for Syslog Settings

Syslog Settings

This page describes SyslogNG settings available in the web interface. It includes verified field names, default behavior, and where logs are written when debugging is enabled.

For device or application setup, see Receiving Data. For advanced pipeline customization using config.yaml and conf.d/, see Syslog pipeline customization.

Location in UI

  • Settings → System Settings → SyslogNG

Listener ports

  • Syslog Bsd Udp Port → SYSLOG_BSD_UDP_PORT
  • Syslog Bsd Tcp Port → SYSLOG_BSD_TCP_PORT
  • Syslog Rfc5424 Port → SYSLOG_RFC5424_PORT
  • Syslog Json Port → SYSLOG_JSON_PORT
  • Syslog Raw Tcp Port → SYSLOG_RAW_PORT
  • Syslog Raw Udp Port → SYSLOG_RAW_UDP_PORT
  • Syslog Vmware Port → SYSLOG_VMWARE_PORT
  • Syslog Vmware Udp Port → SYSLOG_VMWARE_UDP_PORT
  • Syslog Tls Port → SYSLOG_TLS_PORT

Notes:

  • TLS requires valid files at:
    • SYSLOG_TLS_CERT_FILE (cert)
    • SYSLOG_TLS_KEY_FILE (key)

Flow control and buffering

  • Syslog Max Connections → SYSLOG_MAX_CONNECTIONS
  • Syslog Flow Control → SYSLOG_FLOW_CONTROL
  • Syslog Disk Buffer → SYSLOG_DISK_BUFFER
  • Syslog Buffer Reliable → SYSLOG_BUFFER_RELIABLE
  • Syslog Memory Buffer Size Mb → SYSLOG_MEMORY_BUFFER_SIZE_MB
  • Syslog Memory Buffer Length → SYSLOG_MEMORY_BUFFER_LENGTH
  • Syslog Disk Buffer Size Mb → SYSLOG_DISK_BUFFER_SIZE_MB

Destination batching

  • Syslog Destination Workers → SYSLOG_DESTINATION_WORKERS
  • Syslog Destination Batch Lines → SYSLOG_DESTINATION_BATCH_LINES
  • Syslog Destination Batch Timeout → SYSLOG_DESTINATION_BATCH_TIMEOUT

Debug logging

  • Syslog Debug → SYSLOG_DEBUG
    • Writes to /var/log/logzilla/syslog/debug.log
  • Syslog Debug Json → SYSLOG_DEBUG_JSON
    • Writes to /var/log/logzilla/syslog/debug-json.log

Important:

  • Disable debug toggles after troubleshooting to reduce load and disk usage.

PCI compliant logs

  • Pci Compliant Logs → PCI_COMPLIANT_LOGS
    • Writes to /var/log/logzilla/pci-compliant/

Extra log rules (advanced)

  • Syslog Extra Log Rules → SYSLOG_EXTRA_LOG_RULES

Related topics

Syslog Settings | LogZilla Documentation