Up until version 4.12, when #syslog_ng ran into an error jumping to a saved #systemd #journal position, it read the journal from the beginning. With the latest syslog-ng version, you can configure what happens in case of such an error.
https://www.syslog-ng.com/community/b/blog/posts/syslog-ng-journald-source-how-to-avoid-log-bombs-on-errors
Remote profile

Peter Czanik
syslog-ng & sudo evangelist at BalaBit (One Identity), openSUSE / Fedora / FreeBSD contributor, OpenPOWER & Arm maniac, IBM POWER champion
Open remote profile ↗Does #syslog_ng support the latest #OpenSearch version? I suspected that the answer was yes, but I gave it a try anyway. And as expected, starting to use OpenSearch 3.9 with syslog-ng is a smooth experience.
https://www.syslog-ng.com/community/b/blog/posts/using-syslog-ng-with-opensearch-3-9
One of the core dependencies of #syslog_ng is the #ivykis library. We have a few #FreeBSD specific fixes in our ivykis fork, however the syslog-ng port uses ivykis from ports instead of the bundled version. I am now working on making it selectable. #Testing and help are welcome.
https://www.syslog-ng.com/community/b/blog/posts/building-syslog-ng-with-bundled-ivykis-on-freebsd







