Skip to Main Content
IBM Power Ideas Portal


This portal is to open public enhancement requests against IBM Power Systems products, including IBM i. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Submitted
Workspace AIX
Created by Guest
Created on Dec 15, 2025

Native AIX syslog function should support encrypted logs when forwarding to a central syslog server

In this day and age of OS security-awareness and its importance within operating systems (being available out of the box),  critical OS logging functions such as syslog should support encrypting the logs if they need to be forwarded to a central collection server and potentially making the logs inaccessible to general users on the host.  The attempt to provide this function by porting rsyslog to AIX only introduced more issues since rsyslog does not support compression and/or pruning of logs, and it is also more complex to configure.  In certain configurations, it will stop writing to the log files.  However, most importantly, the rsyslog tool which was ported to AIX currently requires tens of unsupported rpms to enable sending encrypted syslog data to a central server.   This requirement introduces more potential security issues (because the rpms are provided as is). 

 Hence, instead of trying to implement rsyslog with SSL or TLS support on AIX, I believe implementing encryption within the native AIX syslog tool makes more sense from a security perspective, and it will reduce the amount of work administrators need to do implement encrypted syslog data because they will not need to build/implement from scratch a new compression/pruning method for syslog data as they would if rsyslog is utilized.  Within the industry, I know that logrotate is utilized to manage logs, but this is also not natively available on AIX.  Also, there are changes occurring with logging overall to secure data such as syslog from general access.  Hence, OS logging has become more important, and the emphasis is trying to secure the data by not allowing general access.  AIX development should seriously review this need for encrypting syslog data as well as the security of AIX OS logs in general from an access perspective.  Thanks. 

Idea priority High