syslog-ng 4.13 introduces AWS CloudWatch support and JSON ordering controls

The syslog-ng project is preparing for the release of version 4.13, which is expected to arrive in the coming weeks. This update includes several core enhancements and bug fixes designed to improve reliability across diverse operating systems including RHEL, Fedora, and FreeBSD.

Beyond standard syslog functionality, the new version expands support for modern observability and cloud-native workflows. Key additions focus on better integration with cloud providers and more granular control over structured data formats used in centralized logging pipelines.

Technical improvements in syslog-ng 4.13

• Cloud Integration: Adds a new Hybrid Logical Clock (HLC) destination for AWS CloudWatch Logs to improve event ordering.
• Data Formatting: Introduces JSON key ordering control and implements fixes for the Graylog Extended Log Format (gELF).
• Network Reliability: Implements exponential reconnect backoff with jitter to prevent thundering herd issues during connection failures.
• Security and Debugging: Adds support for PKCS#12 passwords and introduces debug macro storage control.

Why it matters

These updates are significant for system administrators managing hybrid environments that bridge traditional Linux servers with cloud-native observability stacks like OpenTelemetry or ElasticSearch. The improved reconnection logic and AWS integration enhance the stability of log shipping in large-scale distributed systems.