# Getting Started with rsyslog

rsyslog is a modern, high-performance logging service and the default system logger on many Linux distributions. It extends traditional syslog with advanced features like structured logging, reliable TCP/TLS delivery, and integration with modern pipelines (e.g., Elasticsearch, Kafka, or cloud services).

This guide helps you get up and running quickly. It includes:

- Beginner Tutorials
- AI Assistants
- Installing rsyslog
- Basic Configuration
- Understanding the Default Configuration
- Forwarding Logs
- Next Steps

Quick Start (for experienced users):

    sudo apt install rsyslog
    sudo systemctl enable --now rsyslog

The following pages explain these steps in more detail.

## Understanding rsyslog version numbers

Every regular rsyslog release is tagged `8.yymm.0`. The constant `8` marks the current major series, `yymm` tells you the year and month of the build, and the trailing digit starts at `0` and only increments when a quick follow-up fix ships. Seeing a version such as `8.2404.0` instantly reveals it was published in April 2024 and is part of the same feature level as any other `8.2404.x` package. Stable builds arrive roughly every second month in even numbered months, typically on a Tuesday around mid-month, with an earlier December drop to avoid holiday downtime. If your installation shows a much older `yymm` value, plan an upgrade to keep up with supported features and fixes.

Newcomers can read the full background and rationale in rsyslog Release Numbering Scheme.

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2025 Rainer Gerhards and others. Licensed under the Apache License 2.0.