Blog

Learn how to secure syslog pipelines with encryption, authentication, access controls, and hardening best practices. Understand common threats and compliance considerations.

Learn how syslog scales in high-volume environments. Explore performance bottlenecks, buffering, backpressure, batching, and architectural patterns for reliable log ingestion.

Learn how syslog is used in practice across operating systems, network devices, applications, and security platforms. Explore common integrations with SIEMs and observability tools.

Explore common syslog deployment models, including local, centralized, distributed, and high-availability setups. Learn how syslog scales from single hosts to SIEM-backed enterprise pipelines.

Learn how syslog works, including message format, severity levels, facilities, transport protocols (UDP, TCP, TLS), and reliability mechanisms like buffering and queuing.

Learn what syslog is, how it works, and why it remains the backbone of modern logging. Explore use cases, benefits, and limitations in this beginner-friendly guide.

The starting point of our comprehensive syslog guide, that starts from the basics and covers every aspect of syslog collection, transport, and scaling

Our automated data engine solves syslog issues: fixes, optimizes, and structures security logs before they reach your SIEM, improving performance and accuracy

Discover how AxoSyslog enhances log management by automatically detecting and tagging formatting errors in syslog messages. Improve data quality, reduce false positives, and streamline your security operations with Axoflow!

Watch how to use log tapping to detect rogue devices, investigate parsing errors, and find out what’s wrong with the syslog messages your devices are sending.

Learn how to install AxoSyslog, our syslog-ng™ fork from our repository on RPM-based Linux distributions like RHEL, Fedora, or AlmaLinux.

Log tapping samples the log flow of your security data pipeline on demand. You can use labels to filter for specific messages and tap only those messages. You can investigate problematic events with a few clicks.

Optimize throughput and resource usage when transporting logs using the OpenTelemetry Protocol (OTLP)! Our performance tests show how latency and bandwidth relate to data compression and multithreaded processing.

The problems of the syslog protocol and how the OpenTelemetry protocol and AxoSyslog ensures seamless and structured data transport across your network.

Packet drops and buffering in syslog and observability pipelines

How to parallelize syslog message processing to scale syslog over UDP reception on a single node: dos, dont's, and trade-offs, and the power of eBPF.

Using syslog over UDP can lead to significant message loss. Here's how you can tune the kernel and syslog-ng parameters to minimize the risk of losing messages

Users report that syslog over UDP loses 30-40% of their messages. Learn why messages are dropped and how you can solve or at least mitigate the problems.