Destinations

Configure Axoflow to send your security data to SIEMs, object storage, observability platforms, and other destinations.

The following chapters show you how to configure Axoflow to send your data to specific destinations, like SIEMs or object storage solutions.

You can find the list of existing destinations on the Destinations page.
To modify an existing destination, select its name from the list, then select Edit.
Stores and External Stores are also listed as destinations.
- AxoStore stores logs locally on the AxoRouter that processed the messages.
- External stores use a separately deployed AxoLake or an existing compatible ClickHouse cluster.
- Logstore is a new store for local and external data storage based on Apache Parquet and Apache Avro. Logstore is now in early-access.
To create a new store, see Create Store or Create External Store.
To create a new destination, select Add Destination. See the section of the specific destination for details.
To find and add a supported destination, you can also use the Integrations page.

List of destinations

Configure Axoflow to write your log data into Amazon S3 buckets.

Support for an Apache Kafka destination is coming soon. Request it, or ask about the status of the integration.

Send data to AxoStore, the local storage on your AxoRouter hosts, and access the stored data.

Find out about upcoming support for sending data from Axoflow to ClickHouse.

Add a CrowdStrike Falcon Next-Gen SIEM destination, and look up the message fields it uses.

Add a Dynatrace destination to send your security data to Dynatrace, and look up the message fields it uses.

Send data from Axoflow to Elastic Cloud and self-managed Elasticsearch clusters.

Forward data to any syslog receiver, or discard it with the /dev/null destination.

Send data from Axoflow to Google BigQuery, Google Cloud Pub/Sub, and Google Security Operations (SecOps).

Send log data from Axoflow to Grafana Loki for storage and querying.

Send data from Axoflow to Microsoft Sentinel and Azure Monitor.

Add an OpenObserve destination to send your security data to OpenObserve, and look up the message fields it uses.

Support for an OpenSearch destination is coming soon. Request it, or ask about the status of the integration.

Configure Axoflow to send your data to Palo Alto Networks Cortex XSIAM.

Add a Splunk Cloud or Splunk Enterprise destination, and look up the message fields that modify the data sent to Splunk.

Add a Sumo Logic destination to send your security data to Sumo Logic, and look up the message fields it uses.