Reference
System Requirements¶
LuceDev Syslog is a single self-contained binary on both platforms. No runtime dependencies to install. The numbers below are for typical and high-volume deployments.
Windows¶
| Component | Minimum | Recommended |
|---|---|---|
| OS | Windows 10 (64-bit) or later | Windows Server 2019+ |
| CPU | 2 cores | 4 cores |
| RAM | 4 GB | 8 GB |
| Disk | 20 GB | 50 GB SSD |
| Network | UDP 514, TCP 6514, TCP 5000 | Gigabit |
Supported Windows versions¶
- Windows 10 (64-bit)
- Windows 11 (64-bit)
- Windows Server 2019
- Windows Server 2022
- Windows Server 2025
No .NET runtime is required — the application is a frozen PyInstaller bundle. The WinSW service wrapper uses .NET Framework, which ships with all supported Windows versions.
Linux¶
| Component | Minimum | Recommended |
|---|---|---|
| OS | Ubuntu 22.04 or 24.04 (64-bit) | Ubuntu 24.04 LTS |
| CPU | 2 cores | 4 cores |
| RAM | 4 GB | 8 GB |
| Disk | 20 GB | 50 GB SSD |
| Network | UDP 514, TCP 6514, TCP 5000 | Gigabit |
Supported Linux distributions¶
- Ubuntu 22.04 LTS (64-bit, x86_64)
- Ubuntu 24.04 LTS (64-bit, x86_64)
Other distros
Other Debian-family distributions are likely to work — the installer detects non-Ubuntu/Debian and asks for confirmation before continuing — but they're not officially tested. Non-Debian distros may need manual systemd unit installation.
Capacity estimates¶
| Profile | Logs per day | Database growth | Recommended hardware |
|---|---|---|---|
| Small | < 100,000 | ~5 GB / year | Minimum spec |
| Medium | ~500,000 | ~30 GB / year | Recommended spec |
| Large | ~2,000,000+ | ~120 GB / year | Recommended + SSD |
These assume average syslog message length around 120 bytes. Your mileage varies based on what your devices send.
SSD strongly recommended at scale
The dashboard reads SQLite directly. On spinning disks, the database becomes the bottleneck above ~500K logs/day. SSDs eliminate this entirely. With archival enabled, the live database stays bounded regardless of total volume.
What runs on the server¶
- One process —
LuceDevSyslog(Windows) or/opt/lucedev-syslog/LuceDevSyslog(Linux) - Two listening sockets by default — UDP 514, TCP 5000
- Up to four when HTTPS and TLS syslog are enabled — UDP 514, TCP 6514, TCP 5000, TCP 5001
- One database file —
data/syslog.dbwith WAL companion files (.db-wal,.db-shm)
No external dependencies — no Redis, no Postgres, no message broker.
Outbound network access¶
The server makes outbound calls only for:
| Destination | Purpose | Frequency |
|---|---|---|
lucedev.com/api/version/syslog | Daily update check | Once per day |
lucedev.com/api/validate | License re-validation | Once per 7 days |
| Your SMTP relay | Notification email | On alert (with cooldown) |
No telemetry. No analytics. No third-party CDNs.