macOS
Homebrewverified · 100%
brew install rsysloglocal Homebrew formula metadata
brew / rank 3588
Install rsyslog with Homebrew, apk, apt, dnf, Nix, zypper
Enhanced, multi-threaded syslogd. Version 8.2608.0 via Homebrew; verified 2026-09-12. Also installable with debian: sudo apt install rsyslog.
install
Additional install commands
Linux
Alpine Linux apkverified · 92%
sudo apk add rsyslogAlpine Linux edge package indexes · rsyslog · source: dl-cdn.alpinelinux.org
Debian aptverified · 92%
sudo apt install rsyslogDebian stable package indexes · rsyslog · source: deb.debian.org
Fedora dnfverified · 92%
sudo dnf install rsyslogFedora Rawhide package metadata · rsyslog · source: dl.fedoraproject.org
Nixverified · 92%
nix profile install nixpkgs#rsyslognixpkgs package indexes · pkgs/by-name/rs/rsyslog/package.nix · source: api.github.com
openSUSE zypperverified · 92%
sudo zypper install rsyslogopenSUSE Tumbleweed package metadata · rsyslog · source: download.opensuse.org
overview
Package summary
Enhanced, multi-threaded syslogd
Project links
Commands and aliases
- msggen
- rsyslog_diag_hostname
- rsyslogd
history
Project history and usage
rsyslog is a modular, multithreaded syslog daemon and log-processing engine. It preserves compatibility with traditional syslog workflows while supporting structured configuration, queues, filtering, reliable transport, and diverse inputs and outputs.
Project history
Rainer Gerhards launched rsyslog in 2004 as a fork of sysklogd. Its initial goals included reliable network transport, better formatting and timestamp precision, database output, and a more extensible design while retaining syslog compatibility.
The project introduced a multithreaded queue engine and RainerScript in 2008. By 2010 its modular input/output architecture had matured, laying the groundwork for its later role as a general-purpose log-processing engine.
Adoption history
Fedora 8 selected rsyslog as its default syslog daemon in 2007, while Red Hat involvement strengthened packaging and IPv6 support. It later became commonly distributed across major Linux package ecosystems; the supplied mappings include Alpine, Debian, Ubuntu, Fedora-family, Nix, openSUSE, and Homebrew.
By the 2010s, deployments increasingly used rsyslog not only as a local syslog daemon but as a high-volume event pipeline, aided by queues, structured data, and integrations with systems such as Elasticsearch and Kafka.
How it is used
On Linux, the distribution-owned main configuration normally resides at `/etc/rsyslog.conf`. Administrators are encouraged to leave that file intact and place new RainerScript rules in `/etc/rsyslog.d/*.conf`.
Common deployments collect local sockets or the systemd journal, receive remote syslog over TCP or UDP, filter and transform messages, buffer them through queues, and write them to files, databases, search systems, or streaming platforms.
Why package nerds care
rsyslog matters to package and systems enthusiasts because it sits at the boundary between classic Unix compatibility and modern observability infrastructure. A single package can accept traditional syslog configuration while also providing modules, disk-assisted queues, structured logging, filtering, and delivery to databases or event platforms.
Timeline
- 2004: rsyslog launched as a fork of sysklogd.
- 2007: Fedora 8 adopted rsyslog as its default syslog daemon.
- 2008: The multithreaded queue engine and RainerScript were introduced.
- 2010: The modern modular architecture had stabilized.
- 2014: High-throughput processing and enterprise-oriented integrations had matured.
- 2018: rsyslog was increasingly positioned within broader observability and event-processing ecosystems.
Related projects
- rsyslog descends from the BSD syslog and sysklogd tradition. Its ecosystem overlaps with systemd-journald, syslog-ng, Elasticsearch, and Kafka, although those systems serve different or broader roles.
Sources
security posture
Risk level: orange
formula declares a Homebrew service.
Risk classifier
orange risk · medium confidence · infrastructure
Why
- formula declares a Homebrew service
Signals
- metadata:service
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Formula metadata declares a service or daemon block.
- Homebrew bottle metadata is available for 6 platform targets.
- Installs with 6 runtime dependencies.
- Build metadata lists 1 build dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Linux
/etc/rsyslog.conf/etc/rsyslog.d/*.conf
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
msggen | cli | global executable | |
rsyslog_diag_hostname | cli | global executable | |
rsyslogd | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-09-19
manager version8.2608.0
manager updated2026-09-12
local dataok
upstreamnot checked
latest detectednot detected
- infoRelease/tag comparison is only available for GitHub repositories.https://www.rsyslog.com/none confidence
install metadata
Package metadata
| Package key | brew:rsyslog |
|---|---|
| Version | 8.2608.0 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/rsyslog |
| Homepage | https://www.rsyslog.com/ |
| Upstream docs | https://www.rsyslog.com/ |
| License | Apache-2.0 AND GPL-3.0-or-later AND LGPL-3.0-or-later |
| Source archive | https://www.rsyslog.com/files/download/rsyslog/rsyslog-8.2608.0.tar.gz |
| Last updated | 2026-09-12T11:18:46Z |
| Pulse | updated |
| Dependencies | gnutls, libestr, libfastjson, libyaml, protobuf-c, snappy |
| Build dependencies | pkgconf |
| Uses from macOS | curl |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | rsyslog |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Debian apt95%
rsyslog 8.2504.0-1
reliable system and kernel logging daemon
sudo apt install rsyslog- Section: admin
- Architecture: amd64
- 8 dependencies
- 2 provides
- 16 optional deps
- normalized package name match
- Matched by: Rsyslog
Debian apt95%
rsyslog-clickhouse 8.2504.0-1
ClickHouse output plugin for rsyslog
sudo apt install rsyslog-clickhouse- Section: admin
- Architecture: amd64
- Source Package: rsyslog
- 3 dependencies
- normalized package name match
- Matched by: Rsyslog
Debian apt95%
rsyslog-czmq 8.2504.0-1
ZeroMQ protocol support for rsyslog via CZMQ
sudo apt install rsyslog-czmq- Section: admin
- Architecture: amd64
- Source Package: rsyslog
- 3 dependencies
- normalized package name match
- Matched by: Rsyslog
Debian apt95%
rsyslog-docker 8.2504.0-1
Docker input plugin for rsyslog
sudo apt install rsyslog-docker- Section: admin
- Architecture: amd64
- Source Package: rsyslog
- 3 dependencies
- 1 optional deps
- normalized package name match
- Matched by: Rsyslog
Debian apt95%
rsyslog-elasticsearch 8.2504.0-1
Elasticsearch output plugin for rsyslog
sudo apt install rsyslog-elasticsearch- Section: admin
- Architecture: amd64
- Source Package: rsyslog
- 3 dependencies
- normalized package name match
- Matched by: Rsyslog
Debian apt95%
rsyslog-gnutls 8.2504.0-1
TLS protocol support for rsyslog (GnuTLS)
sudo apt install rsyslog-gnutls- Section: admin
- Architecture: amd64
- Source Package: rsyslog
- 3 dependencies
- 1 optional deps
- normalized package name match
- Matched by: Rsyslog
Debian apt95%
rsyslog-gssapi 8.2504.0-1
GSSAPI authentication and encryption support for rsyslog
sudo apt install rsyslog-gssapi- Section: admin
- Architecture: amd64
- Source Package: rsyslog
- 3 dependencies
- 1 optional deps
- normalized package name match
- Matched by: Rsyslog
Debian apt95%
rsyslog-hiredis 8.2504.0-1
Redis support for rsyslog
sudo apt install rsyslog-hiredis- Section: admin
- Architecture: amd64
- Source Package: rsyslog
- 5 dependencies
- normalized package name match
- Matched by: Rsyslog
Debian apt95%
rsyslog-kafka 8.2504.0-1
Apache Kafka support for rsyslog
sudo apt install rsyslog-kafka- Section: admin
- Architecture: amd64
- Source Package: rsyslog
- 3 dependencies
- normalized package name match
- Matched by: Rsyslog
Debian apt95%
rsyslog-kubernetes 8.2504.0-1
Kubernetes metadata support for rsyslog
sudo apt install rsyslog-kubernetes- Section: admin
- Architecture: amd64
- Source Package: rsyslog
- 5 dependencies
- normalized package name match
- Matched by: Rsyslog
Debian apt95%
rsyslog-mongodb 8.2504.0-1
MongoDB output plugin for rsyslog
sudo apt install rsyslog-mongodb- Section: admin
- Architecture: amd64
- Source Package: rsyslog
- 4 dependencies
- 1 optional deps
- normalized package name match
- Matched by: Rsyslog
Debian apt95%
rsyslog-mysql 8.2504.0-1
MySQL output plugin for rsyslog
sudo apt install rsyslog-mysql- Section: admin
- Architecture: amd64
- Source Package: rsyslog
- 8 dependencies
- 4 optional deps
- normalized package name match
- Matched by: Rsyslog
Debian apt95%
rsyslog-openssl 8.2504.0-1
TLS/DTLS protocol support for rsyslog (OpenSSL)
sudo apt install rsyslog-openssl- Section: admin
- Architecture: amd64
- Source Package: rsyslog
- 3 dependencies
- normalized package name match
- Matched by: Rsyslog
Debian apt95%
rsyslog-pgsql 8.2504.0-1
PostgreSQL output plugin for rsyslog
sudo apt install rsyslog-pgsql- Section: admin
- Architecture: amd64
- Source Package: rsyslog
- 8 dependencies
- 2 optional deps
- normalized package name match
- Matched by: Rsyslog
Debian apt95%
rsyslog-relp 8.2504.0-1
RELP protocol support for rsyslog
sudo apt install rsyslog-relp- Section: admin
- Architecture: amd64
- Source Package: rsyslog
- 3 dependencies
- normalized package name match
- Matched by: Rsyslog
Debian apt95%
rsyslog-snmp 8.2504.0-1
SNMP protocol support for rsyslog
sudo apt install rsyslog-snmp- Section: admin
- Architecture: amd64
- Source Package: rsyslog
- 3 dependencies
- normalized package name match
- Matched by: Rsyslog
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment
- pkg.so package database
- pkgdb category and tag curation