Veltrea Syslog Server

Name: Veltrea Syslog Server — Download free. Syslog receiver
Availability: InStock
Rating: 5 (1 reviews)
Author: veltrea

Veltrea Syslog Server — Free Download. Syslog receiver

Veltrea Syslog Server is a high-performance network log receiver built to capture syslog messages over UDP and display them in a live, scrollable console. It runs as a self-contained binary without installation, administrative privileges, or internet access, making it suited for offline diagnostics and portable use from removable media. Its core distinction is per-message character encoding detection. Each incoming datagram is decoded individually based on RFC 5424 charset declarations, UTF-8 byte order marks, or statistical byte analysis. This allows a single stream to present Shift_JIS device output alongside UTF-8 sources without corruption. The interface displays the detected encoding for every message in a dedicated column, while a tolerant parser retains malformed or non-standard syslog packets that stricter servers discard.

★★★★★

5.0(1 ratings)

Download Veltrea Syslog Server (Official links)

File size: 3.52 MB

The latest version of Veltrea Syslog Server is: 0.4.0

Operating system: Windows, Mac OS, Linux

Languages: English, Japanese

Developer: veltrea

Price: $0.00 USD (Open Source (MIT))

Per-message encoding resolution. Each syslog datagram is examined separately for an RFC 5424 charset parameter, a UTF-8 BOM, or byte-level heuristics. The chosen encoding is recorded and shown next to the message, so mixed Shift_JIS and UTF-8 traffic remains readable without global stream assumptions.
Real-time UDP log view. Incoming syslog packets appear immediately in a scrolling table with timestamps, source addresses, facility, severity, hostname, tag, and message content. No refresh action is required; the view updates as datagrams arrive on the bound socket.
Tolerant syslog parsing. The parser accepts RFC 3164, RFC 5424, and bare BSD-style framing. Malformed headers, missing fields, or unusual separators do not cause packet drops. Messages that would be rejected by strict validators are still rendered with their extractable fields.
Portable single-file deployment. The GUI edition ships as one executable that opens the UDP socket directly when launched. It can be copied to a USB drive and run on machines without installers, admin rights, or network connectivity for temporary log capture and on-site troubleshooting.
Headless server engine. A separate background engine runs as a Windows service, launchd daemon, or systemd unit. It collects syslog from boot time and writes to disk independently of any foreground interface, providing continuous retention for production hosts.
Remote monitoring frontend. The console edition connects to a running server engine over TCP. Operators can view live messages and manage service state from a different machine. Closing the monitoring window does not interrupt collection on the server.
Bind address override. The listening address can be changed through an environment variable, allowing non-privileged ports for testing or specific interface binding when required. The GUI displays bind success or failure in the first log row.
Cross-platform GUI builds. The portable frontend compiles for Windows and macOS. Japanese font selection is automatic per platform, with Hiragino Kaku Gothic loaded on macOS so multi-byte characters render without additional configuration.
Structured data decoding. RFC 5424 structured data elements are extracted and processed. A charset declaration inside structured data is honored even when no BOM exists, preserving the sender's intended encoding for that specific message.
Non-privileged operation on macOS. On macOS Mojave and later, binding the standard syslog port 514 on all interfaces does not require root. Only binding a specific interface address needs elevated permissions, simplifying deployment on desktop machines.
Log persistence in server mode. The server engine writes received messages to disk for later review. Data is retained beyond restarts, and the storage location follows platform conventions or an environment variable override.
Ad-hoc signed macOS bundles. Ready-to-run application bundles for macOS are produced by a build script. Two variants are generated: one storing data in the user's Application Support directory, and one keeping data beside the executable for zero system footprint on USB drives.

Veltrea Syslog Server was created to address character encoding limitations in existing lightweight Windows syslog receivers. The project originated from a need to handle Japanese-language device logs mixed with UTF-8 sources without losing readability. Development began in 2023 as a personal tool by an engineer working with network equipment that emitted Shift_JIS syslog output. The software is written in Rust, chosen for memory safety, single-binary distribution, and strong text handling capabilities. The codebase is organized into Portable, Server, and Console components sharing one parsing engine. The Portable edition reached version 0.3.0 and remains actively maintained. The Server edition is under active development as the next milestone, targeting continuous production operation on Windows Server.

Alternatives to Veltrea Syslog Server:

Veltrea Syslog Server

Alternatives to Veltrea Syslog Server:

AquaSSH

Subnetlens

SnmpLens