~ubuntu-branches/ubuntu/karmic/rsyslog/karmic-200908151517

« back to all changes in this revision

Viewing changes to doc/rsyslog_ng_comparison.html

  • Committer: Bazaar Package Importer
  • Author(s): Michael Biebl
  • Date: 2008-05-03 09:59:59 UTC
  • mfrom: (1.1.3 upstream)
  • Revision ID: james.westby@ubuntu.com-20080503095959-3zue1idtwaf9zu6m
Tags: 3.16.1-1
* New upstream release.
  - Fixes a segfault in the imklog input plugin. Closes: #479117

Show diffs side-by-side

added added

removed removed

Lines of Context:
1
1
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2
2
<html><head>
3
 
<meta content="de" http-equiv="Content-Language"><title>rsyslog vs. syslog-ng - a comparison</title></head>
 
3
<meta content="de" http-equiv="Content-Language"><title>rsyslog vs. syslog-ng - a comparison</title>
 
4
 
 
5
</head>
4
6
<body>
5
7
<h1>rsyslog vs. syslog-ng</h1>
6
8
<p><small><i>Written by <a href="http://www.gerhards.net/rainer">Rainer Gerhards</a>
25
27
<td valign="top"><b>rsyslog</b></td>
26
28
<td valign="top"><b>syslog-ng</b></td>
27
29
</tr>
28
 
 
29
 
 
30
 
<tr>
31
 
<td colspan="3" valign="top"><br><b>Input Sources</b><br></td>
32
 
</tr>
33
 
<tr><td valign="top">UNIX domain socket</td>
34
 
<td valign="top">yes</td>
35
 
<td valign="top">yes</td><td>
36
 
</td></tr>
 
30
<tr>
 
31
<td colspan="3" valign="top"><br>
 
32
<b>Input Sources</b><br>
 
33
</td>
 
34
</tr>
 
35
<tr>
 
36
<td valign="top">UNIX domain socket</td>
 
37
<td valign="top">yes</td>
 
38
<td valign="top">yes</td>
 
39
<td></td>
 
40
</tr>
37
41
<tr>
38
42
<td valign="top">UDP</td>
39
43
<td valign="top">yes</td>
40
 
<td valign="top">yes</td><td>
41
 
</td></tr>
 
44
<td valign="top">yes</td>
 
45
<td></td>
 
46
</tr>
42
47
<tr>
43
48
<td valign="top">TCP</td>
44
49
<td valign="top">yes</td>
45
 
<td valign="top">yes</td><td>
46
 
</td></tr>
 
50
<td valign="top">yes</td>
 
51
<td></td>
 
52
</tr>
 
53
<tr>
 
54
<td valign="top"><a href="http://www.librelp.com">RELP</a></td>
 
55
<td valign="top">yes</td>
 
56
<td valign="top">no</td>
 
57
<td></td>
 
58
</tr>
47
59
<tr>
48
60
<td valign="top">RFC 3195/BEEP</td>
49
61
<td valign="top">yes (needs separate build process)</td>
50
 
<td valign="top">no</td><td>
51
 
</td></tr>
 
62
<td valign="top">no</td>
 
63
<td></td>
 
64
</tr>
52
65
<tr>
53
66
<td valign="top">kernel log</td>
54
67
<td valign="top">yes</td>
55
 
<td valign="top">yes</td><td>
56
 
</td></tr>
 
68
<td valign="top">yes</td>
 
69
<td></td>
 
70
</tr>
57
71
<tr>
58
72
<td valign="top">file</td>
59
73
<td valign="top">yes</td>
60
 
<td valign="top">yes</td><td>
61
 
</td></tr>
 
74
<td valign="top">yes</td>
 
75
<td></td>
 
76
</tr>
62
77
<tr>
63
 
<td valign="top">mark message generator as an optional input</td>
 
78
<td valign="top">mark message generator as an
 
79
optional input</td>
64
80
<td valign="top">yes</td>
65
 
<td valign="top">no (?)</td><td>
66
 
</td></tr>
 
81
<td valign="top">no (?)</td>
 
82
<td></td>
 
83
</tr>
67
84
<tr>
68
85
<td valign="top">Windows Event Log</td>
69
86
<td valign="top">via <a href="http://www.eventreporter.com">EventReporter</a>
70
87
or <a href="http://www.mwagent.com">MonitorWare Agent</a>
71
88
(both commercial software)</td>
72
 
<td valign="top">via separate Windows agent, paid edition only</td>
 
89
<td valign="top">via separate Windows agent, paid
 
90
edition only</td>
73
91
</tr>
74
 
 
75
 
 
76
92
<tr>
77
 
<td colspan="3" valign="top"><b><br>Network (Protocol) Support</b><br></td>
 
93
<td colspan="3" valign="top"><b><br>
 
94
Network (Protocol) Support</b><br>
 
95
</td>
78
96
</tr>
79
97
<tr>
80
98
<td valign="top">support for (plain) tcp based syslog</td>
104
122
<td valign="top">yes</td>
105
123
</tr>
106
124
<tr>
 
125
<td valign="top">syslog over RELP<br>this is a truely reliable solution (plain tcp syslog can lose messages!)</td>
 
126
<td valign="top">yes</td>
 
127
<td valign="top">no</td>
 
128
</tr>
 
129
<tr>
107
130
<td valign="top">on the wire (zlib) message
108
131
compression</td>
109
132
<td valign="top">yes</td>
146
169
<td valign="top">yes</td>
147
170
<td valign="top">yes</td>
148
171
</tr>
149
 
 
150
 
 
151
 
<tr>
152
 
<td colspan="3" valign="top"><br><b>Message Filtering</b><br></td>
153
 
</tr>
154
 
<tr><td valign="top">Filtering for syslog facility and priority</td>
155
 
<td valign="top">yes</td>
156
 
<td valign="top">yes</td><td>
157
 
</td></tr>
 
172
<tr>
 
173
<td colspan="3" valign="top"><br>
 
174
<b>Message Filtering</b><br>
 
175
</td>
 
176
</tr>
 
177
<tr>
 
178
<td valign="top">Filtering for syslog facility and
 
179
priority</td>
 
180
<td valign="top">yes</td>
 
181
<td valign="top">yes</td>
 
182
<td></td>
 
183
</tr>
158
184
<tr>
159
185
<td valign="top">Filtering for hostname</td>
160
186
<td valign="top">yes</td>
161
 
<td valign="top">yes</td><td>
162
 
</td></tr>
 
187
<td valign="top">yes</td>
 
188
<td></td>
 
189
</tr>
163
190
<tr>
164
191
<td valign="top">Filtering for application</td>
165
192
<td valign="top">yes</td>
166
 
<td valign="top">yes</td><td>
167
 
</td></tr>
 
193
<td valign="top">yes</td>
 
194
<td></td>
 
195
</tr>
168
196
<tr>
169
197
<td valign="top">Filtering for message contents</td>
170
198
<td valign="top">yes</td>
171
 
<td valign="top">yes</td><td>
172
 
</td></tr>
 
199
<td valign="top">yes</td>
 
200
<td></td>
 
201
</tr>
173
202
<tr>
174
203
<td valign="top">Filtering for sending IP address</td>
175
204
<td valign="top">yes</td>
176
 
<td valign="top">yes</td><td>
177
 
</td></tr>
 
205
<td valign="top">yes</td>
 
206
<td></td>
 
207
</tr>
178
208
<tr>
179
 
<td valign="top">ability to filter on any other message
180
 
field  not mentioned above
 
209
<td valign="top">ability to filter on any other
 
210
message
 
211
field not mentioned above
181
212
(including substrings and the like)</td>
182
213
<td valign="top">yes</td>
183
214
<td valign="top">no</td>
210
241
<td valign="top">support for discarding messages
211
242
based on filters</td>
212
243
<td valign="top">yes</td>
213
 
<td valign="top">yes</td><td>
214
 
</td></tr>
 
244
<td valign="top">yes</td>
 
245
<td></td>
 
246
</tr>
215
247
<tr>
216
248
<td valign="top">powerful BSD-style hostname and
217
249
program name blocks for easy multi-host support</td>
223
255
<td></td>
224
256
<td></td>
225
257
</tr>
226
 
 
227
 
 
228
258
<tr>
229
 
<td colspan="3" valign="top"><br><b>Supported Database Outputs</b><br></td>
 
259
<td colspan="3" valign="top"><br>
 
260
<b>Supported Database Outputs</b><br>
 
261
</td>
230
262
</tr>
231
263
<tr>
232
264
<td valign="top">MySQL</td>
274
306
<td valign="top">yes (<a href="omlibdbi.html">omlibdbi</a>)</td>
275
307
<td valign="top">no (?)</td>
276
308
</tr>
277
 
 
278
 
 
279
309
<tr>
280
 
<td colspan="3" valign="top"><br><b>Enterprise Features</b><br></td>
 
310
<td colspan="3" valign="top"><br>
 
311
<b>Enterprise Features</b><br>
 
312
</td>
281
313
</tr>
282
314
<tr>
283
315
<td valign="top">support for on-demand on-disk
292
324
<td valign="top">yes</td>
293
325
</tr>
294
326
<tr>
295
 
<td valign="top">each action can use its own, independant
 
327
<td valign="top">each action can use its own,
 
328
independant
296
329
set of spool files</td>
297
330
<td valign="top">yes</td>
298
331
<td valign="top">no</td>
314
347
<td><a href="professional_support.html">yes</a></td>
315
348
<td>yes</td>
316
349
</tr>
317
 
 
318
 
 
319
350
<tr>
320
 
<td colspan="3" valign="top"><br><b>Config File</b><br></td>
 
351
<td colspan="3" valign="top"><br>
 
352
<b>Config File</b><br>
 
353
</td>
321
354
</tr>
322
355
<tr>
323
356
<td valign="top">config file format</td>
338
371
<td height="25" valign="top">yes</td>
339
372
<td height="25" valign="top">no</td>
340
373
</tr>
341
 
 
342
 
 
343
 
 
344
374
<tr>
345
 
<td colspan="3" valign="top"><br><b>Extensibility</b><br></td>
 
375
<td colspan="3" valign="top"><br>
 
376
<b>Extensibility</b><br>
 
377
</td>
346
378
</tr>
347
379
<tr>
348
 
<td valign="top">Functionality split in separately loadable
 
380
<td valign="top">Functionality split in separately
 
381
loadable
349
382
modules</td>
350
383
<td valign="top">yes</td>
351
384
<td valign="top">no</td>
352
385
</tr>
353
386
<tr>
354
 
<td valign="top">Support for third-party input plugins</td>
355
 
<td valign="top">yes</td>
356
 
<td valign="top">no</td>
357
 
</tr>
358
 
<tr>
359
 
</tr>
360
 
<tr><td valign="top">Support for third-party output plugins</td>
361
 
<td valign="top">yes</td>
362
 
<td valign="top">no</td>
363
 
</tr>
364
 
 
365
 
 
366
 
 
367
 
<tr>
368
 
<td colspan="3" valign="top"><br><b>Other Features</b><br></td>
369
 
</tr>
370
 
<tr>
371
 
</tr><tr>
 
387
<td valign="top">Support for third-party input
 
388
plugins</td>
 
389
<td valign="top">yes</td>
 
390
<td valign="top">no</td>
 
391
</tr>
 
392
<tr>
 
393
</tr>
 
394
<tr>
 
395
<td valign="top">Support for third-party output
 
396
plugins</td>
 
397
<td valign="top">yes</td>
 
398
<td valign="top">no</td>
 
399
</tr>
 
400
<tr>
 
401
<td colspan="3" valign="top"><br>
 
402
<b>Other Features</b><br>
 
403
</td>
 
404
</tr>
 
405
<tr>
 
406
</tr>
 
407
<tr>
372
408
<td valign="top">ability to generate file names and
373
409
directories (log targets) dynamically</td>
374
410
<td valign="top">yes</td>
440
476
<td valign="top">supports multiple actions per
441
477
selector/filter condition</td>
442
478
<td valign="top">yes</td>
443
 
<td valign="top">yes</td><td>
444
 
</td></tr>
 
479
<td valign="top">yes</td>
 
480
<td></td>
 
481
</tr>
445
482
<tr>
446
483
<td valign="top">web interface</td>
447
484
<td valign="top"><a href="http://www.phplogcon.org">phpLogCon</a><br>
469
506
<tr>
470
507
<td height="43" valign="top">flow control
471
508
(slow down message reception when system is busy)</td>
472
 
<td height="43" valign="top">yes (advanced, with multiple ways to slow down inputs depending on individual input capabilities, based on watermarks)</td>
473
 
<td height="43" valign="top">yes (limited? "stops accepting messages")</td>
 
509
<td height="43" valign="top">yes (advanced,
 
510
with multiple ways to slow down inputs depending on individual input
 
511
capabilities, based on watermarks)</td>
 
512
<td height="43" valign="top">yes (limited?
 
513
"stops accepting messages")</td>
474
514
</tr>
475
515
<tr>
476
516
<td valign="top">rewriting messages</td>
504
544
<td valign="top">no</td>
505
545
<td valign="top">yes</td>
506
546
</tr>
507
 
 
508
 
 
509
547
</tbody>
510
548
</table>
511
549
<p>While the <span style="font-weight: bold;">rsyslog</span>