Release history

This page tracks releases that are relevant to the syslog forwarder. Most Collectord changes are common to all products - for the full Collectord changelog, see the Monitoring Kubernetes Release history.

26.10.1 - 2026-10-26

Supports collectorforkubernetes-syslog and collectorforopenshift-syslog version 26.10.x and below.

Collectord updates:

• One DaemonSet instead of two; the -master DaemonSet and 003-daemonset-master.conf are gone
• The Helm chart (oci://registry.outcold.solutions/outcoldsolutions/charts/collectord-syslog) and the manifests pull Collectord’s image from registry.outcold.solutions; where egress is filtered, allow it, ghcr.io and pkg-containers.githubusercontent.com. Docker Hub keeps the same images and charts: set collectord.image.repository: docker.io/outcoldsolutions/collectorforkubernetes (collectorforopenshift on OpenShift), or the manifests’ image: lines, to pull from there; the Red Hat certified OpenShift manifest still pulls from registry.connect.redhat.com
• The Helm chart takes collectord.image.digest, empty by default: set it to the image’s sha256: digest to pin the image by digest (the FIPS and Red Hat certified images have digests of their own)
• The Kubernetes manifest reads the API server’s audit logs
• Collectord runs under the built-in system-node-critical and system-cluster-critical priority classes, so the kubelet does not evict it
• The Kubernetes manifest’s ClusterRole drops its */* wildcard and grants nothing on Secrets
• The addon no longer runs privileged
• The files rsyslog writes from the journal (/var/log/syslog, messages, auth.log and the like) are no longer read, so each journal line reaches the syslog server once
• New, off by default: repeated log lines go out as one counted line where syslog.format has {{collectord_repeat_count}}
• New, off by default: storms of alike lines fold into one summary a minute where syslog.format has {{collectord_fold_count}}
• New [input.script::<name>] scripted inputs: run your own executable and send what it prints
• SIGHUP reloads the configuration instead of stopping Collectord
• New nodeSelector on host-log inputs, which keeps the API server audit-log input on the control-plane nodes
• The OpenShift manifest carries its own SecurityContextConstraints: no privileged SCC grant needed
• Updated Go runtime to 1.27.3
• Bug fix: the syslog output wrote a line for an event a whitelist or blacklist had dropped
• Bug fix: a syslog.format set in an override could be ignored; it now applies, so check it before upgrading
• Bug fix: container logs could lose lines after restarts, rotations and pod deletions
• Bug fix: host logs could skip journal entries, and RFC 3339 /var/log/syslog lines were not extracted
• Bug fix: on busy clusters watches were dropped and re-listed every few minutes

26.04.1 - 2026-04-27

Supports collectorforkubernetes-syslog and collectorforopenshift-syslog version 26.04.x and below.

Collectord updates:

• Updated Go runtime to 1.26.2
• Updated SQLite library to 3.53
• FIPS-compliant image
• Improved on-volume database for PVC volumes, preventing database corruption
• Collectord describe command now shows the source of each annotation ([pod], [namespace], [configuration:<name>])
• Many stability and performance fixes - see the Monitoring Kubernetes 26.04.1 entry for the full bullet list

25.10.x - 2025-10-27

Versioning scheme changed from semver (5.X) to YY.MM. See Monitoring Kubernetes 25.10.2 for Collectord changes.

Older releases

For Collectord changes prior to 25.10, refer to the Monitoring Kubernetes Release history. The agent binary is shared across products, and per-product differences are limited to the output configuration ([output.syslog] here vs. [output.splunk] there).