Blog

Secure your syslog pipeline with encryption, authentication, and access controls. Common threats, hardening best practices, and compliance tips.

How syslog scales in high-volume environments: performance bottlenecks, buffering, backpressure, batching, and patterns for reliable log ingestion.

How syslog is used in production across operating systems, network devices, and applications, plus common SIEM and observability integrations.

Common syslog deployment models: local, centralized, distributed, and high-availability setups, from single hosts to enterprise pipelines.

How syslog works: message format, severity levels, facilities, transport over UDP, TCP, and TLS, plus reliability mechanisms like buffering.

Learn what syslog is, how it works, and why it remains the backbone of modern logging. Use cases, benefits, and limitations for beginners.

The starting point of our comprehensive syslog guide, that starts from the basics and covers every aspect of syslog collection, transport, and scaling

Our automated data engine solves syslog issues: fixes, optimizes, and structures security logs before they reach your SIEM, improving performance and accuracy

AxoSyslog automatically detects and tags formatting errors in syslog messages, improving data quality and reducing false positives in your SIEM.

Watch how to use log tapping to detect rogue devices, investigate parsing errors, and find out what’s wrong with the syslog messages your devices are sending.

Learn how to install AxoSyslog, our syslog-ng™ fork from our repository on RPM-based Linux distributions like RHEL, Fedora, or AlmaLinux.

Log tapping samples your pipeline's log flow on demand. Filter by labels and investigate problematic syslog events with just a few clicks.

Optimize OTLP throughput and resource usage: our performance tests show how latency and bandwidth relate to compression and multithreading.

The problems of the syslog protocol and how the OpenTelemetry protocol and AxoSyslog ensures seamless and structured data transport across your network.

Packet drops and buffering in syslog and observability pipelines

How to parallelize syslog message processing to scale syslog over UDP reception on a single node: dos, dont's, and trade-offs, and the power of eBPF.

Using syslog over UDP can lead to significant message loss. Here's how you can tune the kernel and syslog-ng parameters to minimize the risk of losing messages

Users report that syslog over UDP loses 30-40% of their messages. Learn why messages are dropped and how you can solve or at least mitigate the problems.