Blog

AxoSyslog vs syslog-ng, one year on: 17 releases to 5. Compare the 2025–2026 feature additions, FilterX advances, and release cadence of both syslog projects.

Gartner's 2026 Hype Cycle dropped standalone security data pipelines and added Security Data Lakes. What this market shift means for your SOC.

How Federal Agencies can meet the requirements of the OMB M-26-14 logging mandate, and how Axoflow can help them to get there fast and in a cost-effective way

AI SOC performance is capped by telemetry quality. Learn why vendor-owned normalization, not brittle rule maintenance, sets your AI ceiling.

Cut SIEM costs 30-85% without losing detection coverage. Why sampling, index-time filtering, and tiering fall short, and how pipeline-first filtering wins.

Schema drift silently breaks parsers and creates detection gaps. Learn how pipeline-layer validation catches drift before your SIEM does.

Monolithic SIEMs are failing under cloud scale and rising costs. Why decoupled security architectures and pipelines replace ingest-everything models.

syslog-ng creator Balázs Scheidler on hidden SIEM storage costs, avoiding vendor lock-in, and why manual log parsing wastes engineering time.

Security data pipelines are becoming the SOC's control plane. Key report findings on cost efficiency, data quality, and faster investigations.

Anton Chuvakin and Tim Peacock interview Balázs Scheidler on why data quality, not just cost cutting, makes security data pipelines strategic.

Why CISOs and SOC teams are rethinking SIEM pipelines: cut costs, improve log quality, eliminate blind spots, and automate security data operations.

Monitor syslog-ng or AxoSyslog with Prometheus using axosyslog-metrics-exporter. Diagnose message drops and pipeline issues quickly.

AxoSyslog: the syslog-ng fork built by its original developers. Secure, supported, binary-compatible log management with enterprise features.

Redundant log delivery quietly duplicates data, distorts analytics, and inflates your SIEM bill. Learn how to detect and prevent duplication.

AxoSyslog, our syslog-ng fork, moves to a single clear open source license: GPL-3.0-or-later. What changes for users and contributors.

Activity report of the first year of AxoSyslog, our drop-in syslog-ng fork.

FilterX, AxoSyslog's parsing engine, cleans, classifies, and routes messy FortiGate, Palo Alto, and SonicWall logs for accurate SIEM integration.

Optimize SIEM data ingestion with automated classification. Improve accuracy, reduce costs, and eliminate log chaos. Learn how Axoflow can help!

An end-to-end look at how security data travels from appliance to SIEM, and the ingestion failures that silently hide events from your SOC.

How high-quality security data cuts SIEM costs, improves detection accuracy, and boosts SOC efficiency. Real strategies and a 50% savings story.

Upgrade syslog-ng to AxoSyslog in minutes with no configuration changes. What the drop-in replacement means and how the migration works.

AxoSyslog 4.10 adds Google Pub/Sub gRPC, Microsoft Sentinel, and Azure Monitor destinations. Key features and configuration examples inside.

Axoflow will use its $7 million seed funding to make security data easy-to-handle everywhere: during collection, routing, and in the SIEM.

Four practical tricks to reduce SIEM data volume and cut ingestion costs. Collect better data instead of more data, without losing visibility.

Learn how security data pipeline management tools like Axoflow improve data quality, cut SIEM costs, and boost security team efficiency.

Six months into AxoSyslog, the binary-compatible syslog-ng fork: development activity, new features, and what's ahead for the project.

AxoSyslog 4.9 highlights: ClickHouse destination, gRPC improvements, new FilterX features, and bug fixes for the AxoSyslog and the syslog-ng projects.

Our automated data engine solves syslog issues: fixes, optimizes, and structures security logs before they reach your SIEM, improving performance and accuracy

FilterX makes filtering and modifying logs easier and faster, handling nested JSON and OpenTelemetry logs as a syslog-ng filter replacement.

AxoSyslog automatically detects and tags formatting errors in syslog messages, improving data quality and reducing false positives in your SIEM.

AxoSyslog is now a real fork of syslog-ng: still open source under the same license, actively maintained with new features from its creators.

Metrics, management, and alternatives for syslog-ng Premium Edition. Modernize your syslog-ng based logging infrastructure without disrupting your deployments!

Metrics and management for telemetry pipelines based on Syslog Connect for Splunk (SC4S) and Splunk: observe your telemetry pipeline in real time!

Meet the Axoflow team at KubeCon Europe 2024 in Paris at Booth L36: Logging operator, Telemetry Controller, and pipeline observability.

Metrics and management for syslog-ng based enterprise logging: gain visibility into your telemetry pipeline health and reduce downtime.

Packet drops and buffering in syslog and observability pipelines

syslog-ng 4.6 allows you to send data directly to Google BigQuery, better collect logs on macOS, parse Windows XML logs, and improves OpenTelemetry performance

Learn how to create usable log messages by configuring log severity levels, with special focus on Python, OpenTelemetry, and syslog log levels.

Learn how to create usable log messages by configuring log severity levels, with special focus on Python, OpenTelemetry, and syslog log levels.

Documentation updates for AxoSyslog, the cloud-native syslog-ng distribution: OpenTelemetry support, Splunk HEC destination, eBPF support, and new parsers

How to parallelize syslog message processing to scale syslog over UDP reception on a single node: dos, dont's, and trade-offs, and the power of eBPF.

Republishing syslog-ng documentation in a new format, under the AxoSyslog Core name to comply with the syslog-ng Open Source Edition documentation license

syslog-ng disk buffering benefits, and how to configure it to prevent data loss from local and upstream failure modes like crashes, network outages, overloads.

Using syslog over UDP can lead to significant message loss. Here's how you can tune the kernel and syslog-ng parameters to minimize the risk of losing messages

Users report that syslog over UDP loses 30-40% of their messages. Learn why messages are dropped and how you can solve or at least mitigate the problems.

Users report that syslog over UDP loses 30-40% of their messages. Learn why messages are dropped and how you can solve or at least mitigate the problems.

Logs have been my passion for over two decades now. As a 3rd-year university student, I started an Open Source project to fix the “syslogd” problem. syslogd was the standard solution at that time to collect, deliver and aggregate system and device logs. The new project was named “syslog, the next generation” or syslog-ng for short. Well, 25 years on and we are now launching Axoflow – where we are bringing to market a long-overdue capability for the burgeoning Observability space that we anticipate will have similar impact!

Log data as collected from operating systems, appliances, and applications is extremely unstructured. You can't imagine how much so. Unless you are an analyst working with logs or you have a past where you were "grepping" data in log files, you are probably not aware of the infinite variety of formats and lack of standardization. If this is the case, you likely have a less-than-complete understanding of the story logs can tell – be it security incidents, IT operations irregularities, and a myriad of other business insights.

Axoflow joins Splunk Partnerverse - We're thrilled to help Splunk users harness the power of their data