Can syslog store logs in a database instead of files?

[Deleted member 65953]

Is it possible for FreeBSD's syslog to store log entries inside a database (e.g. SQLite or PostgreSQL) instead of in plain text files? Or must I replace FreeBSD's syslog with another syslog implementation that supports storing log entries inside a database?

 

[SirDice]

Is it possible for FreeBSD's syslog to store log entries inside a database (e.g. SQLite or PostgreSQL) instead of in plain text files?

No.

Or must I replace FreeBSD's syslog with another syslog implementation that supports storing log entries inside a database?

Yes.

 

[Mjölnir]

Try pkg install psearch portell, then psearch -c sysutils -s syslog and then portell syslog-ng. Et voilà! There's gold in them thar networks...

 

[SirDice]

Note that support for various databases is off by default on sysutils/syslog-ng. So the package doesn't have them enabled.

MONGO=off: MongoDB support
REDIS=off: Build with Redis support
SQL=off: Build with database (libdbi) support

sysutls/rsyslog8 (commonly used on RHEL and variants) is also an alternative but that also has all database support off by default:

DBI=off: LibDBI output module for rsyslog
ELASTIC=off: Elasticsearch module for rsyslog
MYSQL=off: MySQL output module for rsyslog
PGSQL=off: PostgreSQL output module for rsyslog

 

[Deleted member 65953]

Note that support for various databases is off by default on sysutils/syslog-ng. So the package doesn't have them enabled.

Does this mean that it is necessary to build from source in order to enable support for saving into databases?

 

[SirDice]

Does this mean that it is necessary to build from source in order to enable support for saving into databases?

Build from ports, yes.

 

[Mjölnir]

But don't mix ports from latest with packages from quarterly!