You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
As per #6862, we should have a syslog sink that makes it easy to send Syslog formatted logs. This should wrap the socket sink to support the various socket protocols.
I can't help but wonder if this would make more sense as an encoding option that theoretically any sink could support.
I use Vector heavily in my company to forward security events to Google Chronicle using the gcp_chronicle_unstructured sink, but Chronicle only accepts syslog format for a good number of log types.
It wraps the existing socket transport utilities with the syslog codec from #23777 as a dedicated syslog sink — supports TCP, UDP, and Unix sockets with RFC 5424 and RFC 3164. Thanks to @vparfonov, @polarathene, and @syedriko for the encoder work that made this straightforward to build.
Activity
prognant commentedon Apr 9, 2021
Will probably have to support both old (rfc3164) and new (rfc5424).
wfender commentedon Sep 17, 2021
Hello,
Do you have any news about this feature ?
It would be a very great and useful feature expected by many people.
jszwedko commentedon Sep 17, 2021
Hi @wfender . We are working on the groundwork for this in #8617, but don't have a definite ETA yet.
43 remaining items
The1hauntedX commentedon Jun 6, 2025
I can't help but wonder if this would make more sense as an encoding option that theoretically any sink could support.
I use Vector heavily in my company to forward security events to Google Chronicle using the gcp_chronicle_unstructured sink, but Chronicle only accepts syslog format for a good number of log types.
jszwedko commentedon Jun 6, 2025
Big 👍 to making this a encoding codec. There is a PR started for this over here: #21307
Once that exists, the
syslogsink could be a simple wrapper around thesocketsink with thesyslogcodec preconfigured.abjklk commentedon Jan 6, 2026
Big thanks to @syedriko @polarathene @vparfonov for merging #23777 , we finally have a syslog encoder !
feat(syslog sink): add dedicated syslog sink for RFC 5424/3164 output
tot19 commentedon Mar 27, 2026
I've opened a PR for this: #25055
It wraps the existing socket transport utilities with the syslog codec from #23777 as a dedicated
syslogsink — supports TCP, UDP, and Unix sockets with RFC 5424 and RFC 3164. Thanks to @vparfonov, @polarathene, and @syedriko for the encoder work that made this straightforward to build.feat(syslog sink): add dedicated syslog sink for RFC 5424/3164 output
feat(syslog sink): add dedicated syslog sink for RFC 5424/3164 output
feat(syslog sink): add dedicated syslog sink for RFC 5424/3164 output
feat(syslog sink): add dedicated syslog sink for RFC 5424/3164 output
feat(syslog sink): add dedicated syslog sink for RFC 5424/3164 output
feat(syslog sink): add dedicated syslog sink for RFC 5424/3164 output
feat(syslog sink): add dedicated syslog sink for RFC 5424/3164 output
feat(syslog sink): add dedicated syslog sink for RFC 5424/3164 output