What Is a Syslog Server?

QuinnyPig

"Splunk that runs locally with a worse UX, but on balance doesn't eat all the resources you throw at it and doesn't charge you a kidney."

IronWolve

We moved to splunk now and mostly happy with it, mix of windows/linux/etc logs. But with AI, I can see opensource alternatives getting better.

brianjlogan

> A syslog server is a foundational tool for centralized log management in modern IT environments I'd very much recommend a more modern log stack than a traditional syslog server. There are many articles covering the limitations of Syslog. Better to replace that component by utilities like OpenTelemetry and JSON structured logging. You can run a single binary version of Loki https://grafana.com/docs/loki/latest/get-started/deployment-... Or use something like the Otel collector to send your logs to a remote host. I have done my fair share of rsyslog and syslog-ng. I would not say a "Syslog" server belongs in a modern stack.

ang_cire

An intro article on syslog servers in the year of our Lord 2026? Did you know you can replace your noSQL db with VSAM too (honestly better than mongo).

_kb

Syslog is still everywhere on a lot of hardware and appliance style devices. For those bringing that into modern telemetry stack I can't recommend Grafana Alloy enough ( https://grafana.com/docs/alloy/latest/ ). There's a loki.source.syslog component that lets you ingest RFC5424 or RFC3164 format messages over UDP, TCP, and with mTLS. These can then be parsed, filtered, transformed, and routed to anywhere else you require. If you're stuck with a device that's UDP only it can deploy to a nearby host (e.g. container runtime on a switch, or local ingest node), perform log collection, then queue and forward via OTel to central or cloud infra with encryption, delivery and integrity guarantees from there. It's a really neat and powerful tool.

Transformanshen

The article is not bad, but a little outdated. Syslog is a database that will not go anywhere, because a lot of equipment and software still send logs this way. But in 2026, building the entire infrastructure around it is already strange.