Balázs Scheidler - Axofllow
by 
Balázs Scheidler
July 23, 2026

Closing the Data-Detection Gap: What We're Building

SANS 2026: 80% of detection teams can barely keep pace. Faster rule-writing won't help, a stable data layer will. See how to run Sigma in-stream, before the SIEM
SANS 2026: 80% of detection teams can barely keep pace. Faster rule-writing won't help, a stable data layer will. See how to run Sigma in-stream, before the SIEM
Bence Csáti - Axoflow
by 
Bence Csáti
July 20, 2026

Raw Logs Get AI Triage Wrong. Every Time.

We gave a security agent raw, unnormalized vendor logs and asked it to triage a real attack scenario. Nine runs, zero correct. Here's why raw logs break AI triage — and what changes once the data is normalized and enriched.
Raw Logs Get AI Triage Wrong. Every Time.

All Articles

What’s new in AxoSyslog versions 4.18–4.22: FilterX enhancements, improved ClickHouse and S3 outputs, OTLP keep-alive support, and smarter worker autoscaling for high-performance log pipelines.
Róbert Fekete - Axoflow
by 
Robert Fekete
January 22, 2026

What’s New in AxoSyslog Versions 4.18 – 4.22

AxoSyslog 4.18-4.22: FilterX enhancements, better ClickHouse and S3 outputs, OTLP keep-alive, and smarter worker autoscaling for log pipelines.
Breaking Free from Vendor Lock-in: Cutting Splunk Ingestion Costs with a Security Data Pipeline
Balázs Scheidler - Axofllow
by 
Balázs Scheidler
January 14, 2026

Breaking Free from Vendor Lock-in: Cutting Splunk Ingestion Costs with a Security Data Pipeline

syslog-ng creator Balázs Scheidler on hidden SIEM storage costs, avoiding vendor lock-in, and why manual log parsing wastes engineering time.
Sending indexed fields can make your Splunk instance run far more efficiently. This post shows how easily you can send payload- and externally-derived metadata to Splunk with Axoflow.
Mark Bonsack - Axoflow
by 
Mark Bonsack
January 7, 2026

10x search improvement? Optimize Splunk fields with Axoflow

Indexed fields can make Splunk searches up to 10x faster. See how Axoflow sends payload- and externally-derived metadata to Splunk efficiently.
 Learn how to secure syslog pipelines with encryption, authentication, access controls, and hardening best practices. Understand common threats and compliance considerations.
Róbert Fekete - Axoflow
by 
Robert Fekete
January 6, 2026

Syslog Security and Hardening

Secure your syslog pipeline with encryption, authentication, and access controls. Common threats, hardening best practices, and compliance tips.
Learn how syslog scales in high-volume environments. Explore performance bottlenecks, buffering, backpressure, batching, and architectural patterns for reliable log ingestion.
Róbert Fekete - Axoflow
by 
Robert Fekete
January 5, 2026

Syslog Scaling and Performance Considerations

How syslog scales in high-volume environments: performance bottlenecks, buffering, backpressure, batching, and patterns for reliable log ingestion.
Learn how syslog is used in practice across operating systems, network devices, applications, and security platforms. Explore common integrations with SIEMs and observability tools.
Róbert Fekete - Axoflow
by 
Robert Fekete
December 22, 2025

Syslog in Practice: Use Cases and Integrations

How syslog is used in production across operating systems, network devices, and applications, plus common SIEM and observability integrations.
Explore common syslog deployment models, including local, centralized, distributed, and high-availability setups. Learn how syslog scales from single hosts to SIEM-backed enterprise pipelines.
Róbert Fekete - Axoflow
by 
Robert Fekete
December 15, 2025

Syslog Deployment Modes: From Local Logs to Enterprise Pipelines

Common syslog deployment models: local, centralized, distributed, and high-availability setups, from single hosts to enterprise pipelines.
Gain strategic control with the Axoflow autonomous data layer. Leverage Axolake, AxoStore, and Axoflow Locker for automated curation, cost reduction, and compliance.
Sándor Guba - Axoflow
by 
Sándor Guba
December 12, 2025

The Autonomous Data Layer: Control Your Data, Cost, and Cyber Risk

Gain strategic control with Axoflow's autonomous data layer: Axolake, AxoStore, and Locker for automated curation, cost cuts, and compliance.
Learn how syslog works, including message format, severity levels, facilities, transport protocols (UDP, TCP, TLS), and reliability mechanisms like buffering and queuing.
Róbert Fekete - Axoflow
by 
Robert Fekete
December 8, 2025

How Syslog Works: Formats, Severity, Facilities & Transport

A clear guide to how syslog works: message format, severity levels, facilities, UDP/TCP/TLS transport, and the mechanisms that prevent log loss.

Subscribe to stay in touch

Sign up for our newsletter to be the first to knew about new articles. We are excited to be realizing our vision above with a full Axoflow product suite.