sysklogd, syslog-ng or metalog, which one do you use and why

[stosss]

I have searched the forum and found a few very old posts. None exactly like this one. I am building a fresh Gentoo install and decided to find out what logger is being used most and why. My plan is to go with the one that gets the most votes. So, will you help out and share your info about your logger?
_________________
SupportTrainingOpenSourceSoftwareService

[matze_na]

I'm using syslog-ng for the simple reason that it was the only one mentioned in the gentoo installation guide I followed a few years ago.
So I'm afraid I can't provide any insight on this topic, except that it "just works" and I couldn't think of a reason to switch to another logger.

[r3tep]

What do you want to do on your new gentoo box?

Do you know, how to analyze logs and did you ever analyzed logs or do you want to analyze logs?

And: how do you want to collect and analyze logs?

[Raistlin Majere]

From the handbook i used

[Bill Cosby]

I use sysklogd, because it is the smallest, and is absolutely sufficient for my uses.
_________________
The Creature from Jekyll Island.

[AllenJB]

metalog. It serves my needs and I don't have to deal with weird, complex configuration syntax that nothing else uses.

[Shining Arcanine]

[WastingBody]

[d2_racing]

I use syslog-ng because it's inside the Gentoo handbook since 2005.

[Muso]

I've used metalog since I started using Gentoo.
_________________
"You can lead a horticulture but you can't make her think" ~ Dorothy Parker
2021 is the year of the Linux Desktop!

[Etal]

[cryptosteve]

I use sysklogd cause it fits my needs.
_________________
- born to create drama -
gpg: 0x9B6C7E15
CS Virtual Travel Bug: VF6G5D

[Ant P.]

I'm using metalog because I can't be bothered installing logrotate.

[rtomek]

syslog-ng with logrotate

syslog-ng was in the handbook. I've never touched the config or anything. logrotate keeps the files small if I need to look for an error. all I did was emerge the two and haven't touched them since.

[dwbowyer]

Metalog because it automatically rotates most system logs without any additional configuration. I was still learning so much about linux at that time that I didn't want to dig into ALL system services (logging particularly at the time), and already knew from past experiences that rampant logs could crash a system by filling a root partition. The Gentoo Handbook specifically said metalog did this... the other loggers needed another package, logrotate.

[Muso]

Metalog. It's been my default in Gentoo since '02.
_________________
"You can lead a horticulture but you can't make her think" ~ Dorothy Parker
2021 is the year of the Linux Desktop!

[dmpogo]

I am using sysklogd because I know the syntax and got used to it from old times and it does a job.

[Nerdanel]

Metalog. It was the default when I started with Gentoo and I've seen no reason to change, especially with having to install logrotate.

[disi]

switched from syslog-ng to metalog because it rotates automatically. One disadvantage is that you would have to customize other software that expects a normal logfile hierarchy.
_________________
Gentoo on Uptime Project - Larry is a cow

[bendeguz]

I'm using syslog-ng, because it was in the handbook.

But another good feature of that app, (as I learned) that it is developed by hungarians.