Freedom251 › Telemetry Pipeline Software
rsyslog
What rsyslog is
rsyslog is a self-hosted log processing engine for collecting, transforming, and routing event data. Its pipeline links inputs, rulesets, and actions, giving operators a way to receive messages, filter and process them, and send them to configured destinations. The project says it can deliver more than one million messages per second to local destinations when processing is limited. Reliability features include disk spooling on demand, backup destinations, and multiple processing threads.
Documented outputs include Elasticsearch, OpenSearch, Apache Kafka, HTTP endpoints, and syslog forwarding. Database destinations include MariaDB/MySQL and PostgreSQL, with libdbi support for several other databases. TLS-protected syslog and forwarding with peer authentication settings are supported. The core programs are under GPLv3, while some runtime files use LGPL. rsyslog is developed for Linux, POSIX, and related UNIX-like systems, and can be installed from source or Git, through packages for Ubuntu, RHEL/CentOS, and Debian, or using Docker. It does not run natively on Windows; a separate Windows Agent collects Event Logs and local files and can relay syslog messages to Linux rsyslog. The project dates to 2004 and is operated by Adiscon GmbH, its main sponsor.
Who it suits
rsyslog suits teams managing self-hosted log pipelines on Linux or related UNIX-like systems that need configurable processing and multiple destinations. Organizations that need Windows Event Log collection can use its separate Windows Agent, while businesses can purchase enterprise support from Adiscon.
What it does well
- Routes processed logs to search systems, Kafka, HTTP, and syslog destinations.
- Supports MariaDB/MySQL, PostgreSQL, and other databases through libdbi.
- Includes disk spooling, backup destinations, and multiple processing threads.
- Supports TLS-protected syslog and peer-authenticated forwarding.
- Free open-source core is available for Linux and POSIX systems.
What to know first
- The core does not run natively on Windows.
- Additional Unix variants such as AIX and HP-UX need volunteer work.
- Paid enterprise support starts at €1,999 per year.
Limits
The free rsyslog plan covers open-source Linux/POSIX software. Windows Agent Basic includes Event Log monitoring but no remote text file monitor licenses; Professional includes 10, and Enterprise includes unlimited remote text file monitor licenses.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| rsyslog | Free · Open-source Linux/POSIX software · source, Git, and distribution packages | Free |
| Windows Agent Enterprise | $109 per machine; page also shows €109 · Per-machine license · Event Log and text file monitoring · Unlimited remote text file monitor licenses | $109, paid once |
| Enterprise Support | 1999 EURO for one year · 20 max support hours · 5 installations · 1 customer contact · 1–2 business day response | €1,999 a year |
| Unlimited Enterprise Support | 19999 EURO for one year · 40 max support hours · Unlimited installations · 5 customer contacts · 24 hour response on business days | €19,999 a year |
| Extended Enterprise Support | 3899 EURO for one year · 40 max support hours · 5 installations · 2 customer contacts · 24 hour response on business days | €3,899 a year |
| Windows Agent Basic | $55 per machine; page also shows €55 · Per-machine license · Event Log Monitor · 0 remote text file monitor licenses | $55, paid once |
| Windows Agent Professional | $79 per machine; page also shows €79 · Per-machine license · Event Log and text file monitoring · 10 remote text file monitor licenses | $79, paid once |
As rsyslog.com lists them, read 9 Oct 2026. The maker's own page has the final word.
Getting started
- Choose source, Git, a maintained distribution package, or the Docker container.
- Install on a Linux or related UNIX-like system.
- Configure inputs, rulesets, and actions for the messages and destinations you need.
- For Windows collection, obtain the separate Windows Agent and relay messages to rsyslog on Linux.
Verdict
Choose rsyslog for a self-hosted Linux or UNIX-like log pipeline with flexible processing, routing, and documented database and service outputs. Look elsewhere if you need the core to run natively on Windows; Windows collection instead requires the separate Windows Agent.
Questions
Is rsyslog free?
Yes. The rsyslog plan is free and covers open-source Linux/POSIX software.
What does paid enterprise support cost?
Enterprise Support is €1,999 a year. Extended Enterprise Support is €3,899 a year, and Unlimited Enterprise Support is €19,999 a year.
Does rsyslog run on Windows?
The rsyslog core does not run natively on Windows. A separate Windows Agent collects Windows Event Logs and local files and can relay syslog messages to rsyslog on Linux.
Is rsyslog open source?
Yes. The core programs are released under GPLv3, while some runtime files use LGPL.
What can rsyslog send logs to?
Documented outputs include Elasticsearch, OpenSearch, Apache Kafka, HTTP endpoints, and syslog forwarding. Database destinations include MariaDB/MySQL and PostgreSQL, with support for other databases through libdbi.
Who operates rsyslog?
The site is operated by Adiscon GmbH, which identifies itself as rsyslog’s main sponsor.
Facts from rsyslog's own pages
- Databases
- The feature list describes database outputs for MariaDB/MySQL and PostgreSQL, plus support through libdbi for several other databases. · docs.rsyslog.com, 9 Oct 2026
- Deployment
- The project offers source and Git installation paths, maintained packages for Ubuntu, RHEL/CentOS, and Debian, and a Docker container. · rsyslog.com, 9 Oct 2026
- Founded
- 2004 · rsyslog.com, 28 Sept 2026
- Integrations
- Documented outputs include Elasticsearch and OpenSearch, Apache Kafka, HTTP endpoints, and syslog forwarding. · docs.rsyslog.com, 9 Oct 2026
- Limit
- The feature list says support for additional Unix variants such as AIX and HP-UX is an upcoming item that needs volunteers. · docs.rsyslog.com, 9 Oct 2026
- Maker
- The rsyslog site is operated by Adiscon GmbH, which identifies itself as rsyslog’s main sponsor. · rsyslog.com, 9 Oct 2026
- Open source
- The project documentation says rsyslog core programs are released under GPLv3, while some runtime files are licensed under LGPL. · docs.rsyslog.com, 9 Oct 2026
- Pipeline
- Its processing model uses inputs, rulesets, and actions to receive, filter, process, and output messages. · docs.rsyslog.com, 9 Oct 2026
- Platform scope
- The documentation says rsyslog does not run natively on Windows and is developed for POSIX, Linux, and related UNIX-like systems. · docs.rsyslog.com, 9 Oct 2026
- Purpose
- rsyslog collects, transforms, and routes event data as a high-performance log processing engine. · rsyslog.com, 9 Oct 2026
- Reliability
- Features include on-demand disk spooling, backup destinations, and multiple processing threads. · docs.rsyslog.com, 9 Oct 2026
- Scale
- The homepage says rsyslog can deliver over one million messages per second to local destinations when limited processing is applied. · rsyslog.com, 9 Oct 2026
- Support
- Community support is available through the mailing list, while Adiscon offers paid enterprise support for business users. · rsyslog.com, 9 Oct 2026
- Transport security
- rsyslog supports TLS-protected syslog and documents TLS forwarding with peer authentication settings. · docs.rsyslog.com, 9 Oct 2026
- Windows collection
- The separate Windows Agent collects Windows Event Logs and local log files and can relay syslog messages to rsyslog on Linux. · rsyslog.com, 9 Oct 2026
Where rsyslog stands on Freedom251
- Telemetry Pipeline Software#14 of 28