axosyslog

AxoSyslog vs syslog-ng, one year on: 17 releases to 5. Compare the 2025–2026 feature additions, FilterX advances, and release cadence of both syslog projects.

AxoSyslog Year 2: Progress Comparison vs. syslog-ng

AxoSyslog vs syslog-ng, one year on: 17 releases to 5. Compare the 2025–2026 feature additions, FilterX advances, and release cadence of both syslog projects.

How AxoSyslog implements in-application ACK, flow control, memory and disk buffers, batching, and how log-iw-size interacts with batch-lines under the hood

AxoSyslog internals: flow control, window size, queues, and batching

How AxoSyslog implements in-application ACK, flow control, memory and disk buffers, batching, and how log-iw-size interacts with batch-lines under the hood

How delivery guarantees, flow control, and buffers behave in security data pipelines across UDP, TCP, HTTP, gRPC, OpenTelemetry Collector, Kafka, and AxoSyslog.

Message delivery guarantees in security data pipelines

How delivery guarantees, flow control, and buffers behave in security data pipelines across UDP, TCP, HTTP, gRPC, OpenTelemetry Collector, Kafka, and AxoSyslog.

What’s new in AxoSyslog versions 4.18–4.22: FilterX enhancements, improved ClickHouse and S3 outputs, OTLP keep-alive support, and smarter worker autoscaling for high-performance log pipelines.

What’s New in AxoSyslog Versions 4.18 – 4.22

AxoSyslog 4.18-4.22: FilterX enhancements, better ClickHouse and S3 outputs, OTLP keep-alive, and smarter worker autoscaling for log pipelines.

If you're transporting log data, switching from syslog or HTTP to gRPC can dramatically improve efficiency, reliability, and scalability. Read our blog to learn why.

Why Use OpenTelemetry gRPC for Log Data Transport

Switching log transport from syslog or HTTP to OpenTelemetry gRPC can dramatically improve efficiency, reliability, and scalability. Here's why.

Discover what’s new in AxoSyslog 4.13–4.17, from advanced log formatting and smarter parsing to cloud integration and performance tuning. Build faster, more reliable log pipelines with the latest features.

What's New in AxoSyslog Versions 4.13–4.17

What's new in AxoSyslog 4.13-4.17: advanced log formatting, smarter parsing, cloud integrations, and performance tuning for reliable pipelines.

how-to-collect-axosyslog-metrics-into-prometheus

How to collect AxoSyslog metrics into Prometheus

Monitor syslog-ng or AxoSyslog with Prometheus using axosyslog-metrics-exporter. Diagnose message drops and pipeline issues quickly.

AxoSyslog: the syslog-ngâ„¢ fork built by its original developers. Get secure, supported, binary-compatible log management with advanced observability, daily vulnerability scans, and enterprise-ready features.

Why Choose AxoSyslog over syslog-ng

AxoSyslog: the syslog-ng fork built by its original developers. Secure, supported, binary-compatible log management with enterprise features.

AxoSyslog, our syslog-ngâ„¢ fork, simplifies its licensing by adopting a single, clear open source license: GNU General Public License version 3 or later (GPL-3.0-or-later)

AxoSyslog License Update: Moving to GPL3

AxoSyslog, our syslog-ng fork, moves to a single clear open source license: GPL-3.0-or-later. What changes for users and contributors.

Activity report of the first year of AxoSyslog, our drop-in syslog-ng fork.

1 year of AxoSyslog

Activity report of the first year of AxoSyslog, our drop-in syslog-ng fork.

How to parse firewall logs with AxoSyslog FilterX

Parsing firewall logs with FilterX

FilterX, AxoSyslog's parsing engine, cleans, classifies, and routes messy FortiGate, Palo Alto, and SonicWall logs for accurate SIEM integration.

Send syslog data to Grafana Loki with syslog-ng

Send syslog data to Grafana Loki with syslog-ng

Send syslog data to Grafana Loki with AxoSyslog, the binary-compatible syslog-ng replacement, with dynamic metadata labels and efficient routing.

How to upgrade from syslog-ng to AxoSyslog

How to upgrade syslog-ng to AxoSyslog

Upgrade syslog-ng to AxoSyslog in minutes with no configuration changes. What the drop-in replacement means and how the migration works.

Google Pub/Sub gRPC, Azure Monitor, Microsoft Sentinel destinations for enhanced cloud integration

Google Pub/Sub gRPC, Sentinel and Azure Monitor destinations in AxoSyslog 4.10

AxoSyslog 4.10 adds Google Pub/Sub gRPC, Microsoft Sentinel, and Azure Monitor destinations. Key features and configuration examples inside.

Send logs to ClickHouse database with AxoSyslog

Sending log data to ClickHouse with AxoSyslog

AxoSyslog 4.9 adds ClickHouse as a destination: send logs directly to your self-hosted ClickHouse database for efficient storage and analysis.

AxoSyslog syslog-ng fork

First 6 months of AxoSyslog, our syslog-ng fork

Six months into AxoSyslog, the binary-compatible syslog-ng fork: development activity, new features, and what's ahead for the project.

AxoSyslog 4.9 release with ClickHouse destination and FilterX

ClickHouse support and FilterX updates in AxoSyslog 4.9

AxoSyslog 4.9 highlights: ClickHouse destination, gRPC improvements, new FilterX features, and bug fixes for the AxoSyslog and the syslog-ng projects.

Filterx makes filtering and modifying log messages easier and faster

Introducing Axoflow FilterX: Revolutionizing Log Parsing and Filtering for Complex Data

FilterX makes filtering and modifying logs easier and faster, handling nested JSON and OpenTelemetry logs as a syslog-ng filter replacement.

Discover how AxoSyslog, a powerful fork of syslog-ngâ„¢, enhances log management by automatically detecting and tagging formatting errors in syslog messages. Improve data quality, reduce false positives, and streamline your security operations with Axoflow's comprehensive suite of tools.

Error tagging in AxoSyslog

AxoSyslog automatically detects and tags formatting errors in syslog messages, improving data quality and reducing false positives in your SIEM.

Install AxoSyslog, our syslog-ng fork from our repository on RPM-based Linux distributions, like RHEL, Fedora, or AlmaLinux

How to install AxoSyslog on RHEL and AlmaLinux

Learn how to install AxoSyslog, our syslog-ngâ„¢ fork from our repository on RPM-based Linux distributions like RHEL, Fedora, or AlmaLinux.

AxoSyslog APT repository, syslog-ng alternative, send logs to Elasticsearch data streams

Elasticsearch data stream, APT repository in AxoSyslog 4.8

AxoSyslog 4.8 release with APT repository, gRPC and S3 destination improvements, and the ability to send logs to Elasticsearch data streams

Log tapping samples the log flow of your security data pipeline on demand, flagging any parsing failures in the data. You can use labels to filter for specific messages and tap only those messages.

Troubleshooting syslog errors with log tapping

Log tapping samples your pipeline's log flow on demand. Filter by labels and investigate problematic syslog events with just a few clicks.

AxoSyslog, the syslog-ng fork by the original creator

AxoSyslog is now a real fork

AxoSyslog is now a real fork of syslog-ng: still open source under the same license, actively maintained with new features from its creators.

syslog-ng 4.7 with better OpenTelemetry performance, gRPC improvements, new metrics

New metrics and performance improvements in syslog-ng 4.7

syslog-ng 4.7 brings better OpenTelemetry performance, gRPC improvements, new metrics, and features to integrate your telemetry pipeline.

Maximizing OpenTelemetry (OTLP) performance

Maximizing OpenTelemetry Transport Performance

Optimize OTLP throughput and resource usage: our performance tests show how latency and bandwidth relate to compression and multithreading.

Cover illustration for ingesting large-volume data streams to the cloud with OpenTelemetry and AxoSyslog

Ingesting Large-volume Data Stream to the Cloud

The problems of the syslog protocol and how the OpenTelemetry protocol and AxoSyslog ensures seamless and structured data transport across your network.

Send logs to OpenObserve, the free Elasticsearch alternative

Forward your Kubernetes logs to OpenObserve with syslog-ng and the Logging operator using AxoSyslog, the cloud-native syslog-ng distribution

Enhance macOS logging with syslog-ng’s native macOS system() source

Collect logs from the native macOS OSlog or log stream with syslog-ng's new darwin-os sources!

syslog-ng contributions by Axoflow, 2023

syslog-ng 2023 community activity report

syslog-ng in 2023: new features (OpenTelemetry, Google Pub/Sub, Splunk, Grafana Loki, Amazon S3, OpenObserve drivers), contributions, and other developments

Send logs to Grafana Loki with syslog-ng and Logging operator

Forward your Kubernetes logs to Grafana Loki with syslog-ng and the Logging operator using AxoSyslog, the cloud-native syslog-ng distribution

How to send log and telemetry data to Google BigQuery with syslog-ng

Send logs and telemetry data directly to Google BigQuery with syslog-ng, using gRPC

Multi-tenancy, namespace-based routing, new outputs in Logging operator 4.4

Logging operator 4.4 brings multi-tenancy with namespace-based routing, outputs like S3, ElasticSearch, Loki, and Splunk for the syslog-ng aggregator, and more

syslog-ng AxoSyslog 4.4.0 release with Amazon S3 and Grafana Loki destinations

AxoSyslog and syslog-ng 4.4.0 release

syslog-ng 4.4 comes with new drivers and lots of new metrics to help you manage your cloud-native and on-premise observability supply chain.

From syslog-ng to LogScale: structured logs from any source

Send structured log messages from syslog-ng to Falcon LogScale via its Ingest Structured Data API, and other destinations in parallel.

syslog-ng and AxoSyslog documentation updates 2023-08

Documentation updates for AxoSyslog, the cloud-native syslog-ng distribution: OpenTelemetry support, Splunk HEC destination, eBPF support, and new parsers

OpenTelemetry support in more detail in AxoSyslog and syslog-ng

Receive or send any kinds of OpenTelemetry logs, traces, and metrics with syslog-ng and AxoSyslog 4.3 using OTLP/gRPC

syslog-ng documentation and similarities with AxoSyslog Core

Republishing syslog-ng documentation in a new format, under the AxoSyslog Core name to comply with the syslog-ng Open Source Edition documentation license

Syslog-ng disk buffering for a resilient syslog architecture

syslog-ng disk buffering benefits, and how to configure it to prevent data loss from local and upstream failure modes like crashes, network outages, overloads.

AxoSyslog Observability in Kubernetes

Get more insights about your logs in Kubernetes using AxoSyslog. Monitor and visualize the metrics of your AxoSyslog Kubernetes deployments.

AxoSyslog and syslog-ng 4.2.0 release

syslog-ng 4.2 comes with new drivers and lots of new metrics to help you manage your cloud-native and on-premise observability supply chain.

AxoSyslog - Log Collection for Kubernetes

Install syslog-ng using the AxoSyslog Helm charts to send Kubernetes logs into OpenSearch. AxoSyslog is a cloud native syslog-ng distribution by Axoflow.

Syslog-ng release 4.1

Exploring the Exciting New Features of syslog-ng 4.1

Version 4.1 with its new metrics system brings syslog-ng closer to the cloud-native ecosystem and the modern observability supply chain.

Subscribe to stay in touch

Sign up for our newsletter to be the first to knew about new articles. We are excited to be realizing our vision above with a full Axoflow product suite.