Transparent router mode
AxoRouter is a powerful aggregator and data processing engine that can receive data from a wide variety of sources, including:
- OpenTelemetry,
- syslog,
- Windows Event Forwarding, or HTTP.
In transparent mode, you deploy AxoRouter in front of your SIEM and configure your sources or aggregators to send the logs to AxoRouter instead of the SIEM. The transparent deployment method is a quick, minimally invasive way to get instant benefits and value from Axoflow, and:
- automatically identify the sending device or application,
- apply device-specific, zero-maintenance parsers to the incoming data,
- enrich the incoming messages with metadata, and
- get metrics about the data throughput.
Note
Note that AxoRouter collects detailed, real-time metrics about the data-flows – giving you observability over the health of the security data pipeline and its components. Your security data remains in your self-managed cloud or in your on-prem instance where your sources, destinations, and AxoRouters are running, only metrics are forwarded to Axoflow Console.
Axoflow Console as SaaS
Axoflow Console on premises
