Balázs Scheidler

Optimize SIEM data ingestion with automated classification. Improve accuracy, reduce costs, and eliminate log chaos. Learn how Axoflow can help!

Classify security data in transit: improve data quality and reduce costs

Optimize SIEM data ingestion with automated classification. Improve accuracy, reduce costs, and eliminate log chaos. Learn how Axoflow can help!

This post gives an end-to-end overview of how security data gets from your appliance to the SIEM

Ways to break data ingestion of your SIEM

Many things can go wrong in data ingestion; chances are high that data is ingested incorrectly, causing security operations and forensics investigations to miss these events. Most organizations don’t have monitoring and controls to notice if something changes or goes wrong. Axoflow helps you avoid these problems by automatically detecting and handling multiple protocols and message formats and by alerting you on problems that it cannot handle automatically.

Discover how high-quality security data can dramatically cut SIEM costs, improve detection accuracy, and enhance SOC efficiency. Learn real-world strategies and a customer success story that saved 50% on SIEM spend.

How high-quality data saves you $$$$

Discover how high-quality security data can dramatically cut SIEM costs, improve detection accuracy, and enhance SOC efficiency. Learn real-world strategies and a customer success story that saved 50% on SIEM spend.

How to upgrade from syslog-ng to AxoSyslog

How to upgrade syslog-ng to AxoSyslog

How to upgrade your syslog-ng installation to AxoSyslog in minutes, without any configuration changes

Google Pub/Sub gRPC, Azure Monitor, Microsoft Sentinel destinations for enhanced cloud integration

Google Pub/Sub gRPC, Sentinel and Azure Monitor destinations in AxoSyslog 4.10

Discover what's new in AxoSyslog 4.10.0! This release introduces Google Pub/Sub gRPC, Sentinel, and Azure Monitor destinations for enhanced cloud integration. Read on for key features and configuration examples."

Detect and respond to threats faster, use AI, and reduce compliance breaches with the automatic Axoflow security data curation pipeline. Also reduces costs by 50% or more. Without coding.

$7M to improve security data quality

Axoflow will use its $7 million seed funding to make security data easy-to-handle everywhere: during collection, routing, and in the SIEM.

4 tricks to reduce security data volume

Top 4 tricks to reduce SIEM data volume

Top 4 tricks to get started with reducing security data volume

How data pipeline management can transform your operations by improving data quality, empowering your security teams, and cutting ingestion costs

Security Data Pipeline Management

Learn how security data pipeline management tools like Axoflow improve data quality, cut SIEM costs, and boost security team efficiency.

AxoSyslog syslog-ng fork

First 6 months of AxoSyslog, our syslog-ng fork

Activity report of the first six months of AxoSyslog, the binary-compatible syslog-ng fork.

AxoSyslog 4.9 release with ClickHouse destination and FilterX

ClickHouse support and FilterX updates in AxoSyslog 4.9

AxoSyslog 4.9 highlights: ClickHouse destination, gRPC improvements, new FilterX features, and bug fixes for the AxoSyslog and the syslog-ng projects.

Our automated data engine solves syslog issues: fixes, optimizes, and structures security logs before they reach your SIEM, improving performance and accuracy

Fix the Syslog Mess: keep invalid syslog data from wrecking your SIEM

Our automated data engine solves syslog issues: fixes, optimizes, and structures security logs before they reach your SIEM, improving performance and accuracy

Filterx makes filtering and modifying log messages easier and faster

Introducing Axoflow FilterX: Revolutionizing Log Parsing and Filtering for Complex Data

FilterX makes filtering and modifying log messages easier and faster. It supports even the most complex log formats, including deeply nested JSON objects and OpenTelemetry logs. FilterX is a replacement for syslog-ng filter statements, parsers, and rewrite rules.

Discover how AxoSyslog, a powerful fork of syslog-ng™, enhances log management by automatically detecting and tagging formatting errors in syslog messages. Improve data quality, reduce false positives, and streamline your security operations with Axoflow's comprehensive suite of tools.

Error tagging in AxoSyslog

Discover how AxoSyslog enhances log management by automatically detecting and tagging formatting errors in syslog messages. Improve data quality, reduce false positives, and streamline your security operations with Axoflow!

AxoSyslog, the syslog-ng fork by the original creator

AxoSyslog is now a real fork

AxoSyslog is now a real fork of syslog-ng™. This blog post shows our plans going forward. TL;DR: AxoSyslog remains open source, uses the same license as syslog-ng™, and we continue to maintain it and add new features in the AxoSyslog repository.

Metrics, management, and alternatives for syslog-ng Premium Edition. Modernize your syslog-ng based logging infrastructure without disrupting your deployments!

Axoflow metrics for syslog-ng Premium Edition

Metrics, management, and alternatives for syslog-ng Premium Edition. Modernize your syslog-ng based logging infrastructure without disrupting your deployments!

Metrics for SC4S and Splunk

Metrics for telemetry pipelines based on SC4S and Splunk

Metrics and management for telemetry pipelines based on Syslog Connect for Splunk (SC4S) and Splunk: observe your telemetry pipeline in real time!

Logging operator, Telemetry controller, and Axoflow at KubeCon2024

Meet us at KubeCon Europe 2024 in Paris at Booth L36!

Axoflow Management Plane and a syslog-ng deployment

Metrics for syslog-ng based log management infrastructures

Metrics and management for syslog-ng based enterprise logging and telemetry pipelines

How to detect TCP and UDP packet drops in syslog and telemetry pipelines

Packet drops and buffering in syslog and observability pipelines

Google BigQuery, macOS, and Windows XML support in syslog-ng version 4.6

syslog-ng 4.6 allows you to send data directly to Google BigQuery, better collect logs on macOS, parse Windows XML logs, and improves OpenTelemetry performance

Creating usable log messages: log timestamps

Learn how to create usable log messages by configuring log severity levels, with special focus on Python, OpenTelemetry, and syslog log levels.

Creating usable log messages: log levels

Learn how to create usable log messages by configuring log severity levels, with special focus on Python, OpenTelemetry, and syslog log levels.

syslog-ng and AxoSyslog documentation updates 2023-08

Documentation updates for AxoSyslog, the cloud-native syslog-ng distribution: OpenTelemetry support, Splunk HEC destination, eBPF support, and new parsers

Scaling syslog to 1M EPS with eBPF

How to parallelize syslog message processing to scale syslog over UDP reception on a single node: dos, dont's, and trade-offs, and the power of eBPF.

syslog-ng documentation and similarities with AxoSyslog Core

Republishing syslog-ng documentation in a new format, under the AxoSyslog Core name to comply with the syslog-ng Open Source Edition documentation license

Syslog-ng disk buffering for a resilient syslog architecture

syslog-ng disk buffering benefits, and how to configure it to prevent data loss from local and upstream failure modes like crashes, network outages, overloads.

syslog over UDP: how to avoid losing messages

Using syslog over UDP can lead to significant message loss. Here's how you can tune the kernel and syslog-ng parameters to minimize the risk of losing messages

Where and how likely syslog over UDP loses messages

Why syslog over UDP loses messages and how to avoid that

Users report that syslog over UDP loses 30-40% of their messages. Learn why messages are dropped and how you can solve or at least mitigate the problems.

Why CISOs and CTOs need log management for observability

Users report that syslog over UDP loses 30-40% of their messages. Learn why messages are dropped and how you can solve or at least mitigate the problems.

Axoflow, logging unleashed

Welcome to Axoflow!

Logs have been my passion for over two decades now. As a 3rd-year university student, I started an Open Source project to fix the “syslogd” problem. syslogd was the standard solution at that time to collect, deliver and aggregate system and device logs. The new project was named “syslog, the next generation” or syslog-ng for short. Well, 25 years on and we are now launching Axoflow – where we are bringing to market a long-overdue capability for the burgeoning Observability space that we anticipate will have similar impact!

Message classification

What is Message Classification and Why is it so Important?

Log data as collected from operating systems, appliances, and applications is extremely unstructured. You can't imagine how much so. Unless you are an analyst working with logs or you have a past where you were "grepping" data in log files, you are probably not aware of the infinite variety of formats and lack of standardization. If this is the case, you likely have a less-than-complete understanding of the story logs can tell – be it security incidents, IT operations irregularities, and a myriad of other business insights.

Subscribe to stay in touch

Sign up for our newsletter to be the first to knew about new articles. We are excited to be realizing our vision above with a full Axoflow product suite.