Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

rsyslog review

#21 of 28 in Telemetry Pipeline Software

A flexible self-hosted pipeline for teams that need detailed log routing and buffering.

7.3/10Editor score
Visit rsyslog
rsyslog7.3 Visit rsyslog

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

rsyslog is an open-source event-processing engine for organizations that operate their own logging infrastructure. It collects data from files, journals, syslog, Kafka, and other inputs, then applies parsing, normalization, filtering, enrichment, and transformation rules. System administrators and infrastructure teams can route events to multiple destinations while retaining control over deployment and pipeline behavior across Linux and Windows environments.

The open-source engine is available without a license charge, while the published paid plans are annual enterprise support contracts. Enterprise Support costs €1,999 per year and includes priority email support, phone support, fixes for current rsyslog releases, and up to 20 support hours. Extended Enterprise Support costs €3,899 per year with up to 40 support hours. Unlimited Enterprise Support costs €19,999 per year and also lists up to 40 support hours. These plans add vendor support and release fixes rather than changing the underlying open-source engine.

Its strongest fit is detailed, self-hosted pipeline control. Rulesets handle conditional routing, templates support structured output and schema mapping, and fan-out sends events to multiple destinations. Disk-assisted queues address buffering and backpressure, while a Prometheus-format statistics endpoint exposes pipeline metrics. Integrations include Elasticsearch, OpenSearch, Grafana Loki, Kafka, Splunk HEC, HTTP, databases, and remote syslog. Organizations seeking a managed telemetry service or minimal operational responsibility should choose another approach; teams with established syslog environments and a need for configurable routing should consider rsyslog.

rsyslog pros and cons

  • Where it wins
    • Rulesets support conditional filtering, parsing, enrichment, and routing.
    • Queues provide disk-assisted buffering and backpressure handling.
    • Broad outputs include Kafka, databases, Elasticsearch, HTTP, and syslog.
  • Where it doesn't
    • Deployment and operations remain self-managed.
    • Enterprise support starts at €1,999 per year.
    • The Unlimited plan lists up to 40 support hours.

rsyslog fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update