syslog-ng pros and cons

4.4 out of 5

6 reviews
100% willing to recommend

Pros & Cons summary

Syslog-ng offers built-in features for alert creation in SIEM and easy log access aiding in incident analysis. It supports real-time monitoring through multiple solution integrations and includes a separate config file alongside core setup. While valued for log extraction, its filtering and observability need enhancement. Configurations can be challenging, and finding experts is difficult. Potential exists for further integration and protocol extensions.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Get the category report

Prominent pros & cons

PROS

Syslog-ng includes features for creating alerts compatible with SIEM integration.

Syslog-ng has a separate configuration file apart from the core configuration.

Ability to extract and store logs is a highly valued feature.

Syslog-ng facilitates easy access to logs, aiding incident demonstration to managers and clients.

Use of compound search enables specific log searches by time, user, or behavior.

CONS

Syslog-ng isn't a true SIEM solution but can create alerts for one.

Syslog-ng filtering has room for improvement.

There is potential for additional integration and protocol extensions with syslog-ng.

Finding professionals who know how to use syslog-ng is challenging.

Observability in syslog-ng leaves room for improvement.

syslog-ng Pros review quotes

ShabbeerNasrudeen

Solution Architect(Splunk- Log Management) at Tata Consultancy

Mar 1, 2023

Syslog-ng has a separate config file in addition to the core configuration.

Read full review

RyanVargas

Senior Director and Senior Systems Engineer (Dual Role), IT Infrastructure and Security at a financial services firm with 51-200 employees

Feb 13, 2023

Syslog-ng has built-in features that we can use to create alerts for a SIEM solution. It isn't a true SIEM solution, but it's sufficient for the time being.

Read full review

FlavioSantos

Data center analyst at Atvos

Aug 30, 2023

For us, the most valuable feature is the use of compound search for searching logs at a specific time, by a specific user, or specific behavior.

Find out what your peers are saying about One Identity, Graylog, SolarWinds and others in Log Management. Updated: August 2025.

DOWNLOAD NOW

866,685 professionals have used our research since 2012.

SidneiYokoyama

CISO at LGPDNOW

Apr 11, 2023

Syslog-ng provides easy access to all my logs. It helps me show managers and other clients precisely where an incident occurred. I also like it because you can integrate syslog-ng with multiple solutions to allow real-time monitoring.

Read full review

Marcelo Almeida

Consultant at CITS - Centro Internacional de Tecnologia de Software

Apr 3, 2023

The ability to extract and store the logs is the most valuable feature of syslog-ng.

Read full review

syslog-ng Cons review quotes

ShabbeerNasrudeen

Solution Architect(Splunk- Log Management) at Tata Consultancy

Mar 1, 2023

The filtering has room for improvement.

Read full review

RyanVargas

Senior Director and Senior Systems Engineer (Dual Role), IT Infrastructure and Security at a financial services firm with 51-200 employees

Feb 13, 2023

Syslog-ng has built-in features that we can use to create alerts for a SIEM solution. It isn't a true SIEM solution, but it's sufficient for the time being.

Read full review

FlavioSantos

Data center analyst at Atvos

Aug 30, 2023

There is room for improvement in terms of observability.

Find out what your peers are saying about One Identity, Graylog, SolarWinds and others in Log Management. Updated: August 2025.

DOWNLOAD NOW

866,685 professionals have used our research since 2012.

SidneiYokoyama

CISO at LGPDNOW

Apr 11, 2023

It's hard to find people who know how to use syslog-ng. I often find problems with configurations, and solutions aren't integrated correctly with syslog-ng. For example, there might be data with extra decimals, or the collector agents are incorrectly named. It isn't a problem with the solution; it's a lack of professionals.

Read full review

Marcelo Almeida

Consultant at CITS - Centro Internacional de Tecnologia de Software

Apr 3, 2023

There is always the potential for additional integration and protocol extensions.

Read full review