Blog

Secure your syslog pipeline with encryption, authentication, and access controls. Common threats, hardening best practices, and compliance tips.

How syslog scales in high-volume environments: performance bottlenecks, buffering, backpressure, batching, and patterns for reliable log ingestion.

How syslog is used in production across operating systems, network devices, and applications, plus common SIEM and observability integrations.

Common syslog deployment models: local, centralized, distributed, and high-availability setups, from single hosts to enterprise pipelines.

A clear guide to how syslog works: message format, severity levels, facilities, UDP/TCP/TLS transport, and the mechanisms that prevent log loss.

Learn what syslog is, how it works, and why it remains the backbone of modern logging. Use cases, benefits, and limitations for beginners.

The starting point of our comprehensive syslog guide, that starts from the basics and covers every aspect of syslog collection, transport, and scaling

Our automated data engine solves syslog issues: fixes, optimizes, and structures security logs before they reach your SIEM, improving performance and accuracy

AxoSyslog automatically detects and tags formatting errors in syslog messages, improving data quality and reducing false positives in your SIEM.

Watch how to use log tapping to detect rogue devices, investigate parsing errors, and find out what’s wrong with the syslog messages your devices are sending.

Learn how to install AxoSyslog, our syslog-ng™ fork from our repository on RPM-based Linux distributions like RHEL, Fedora, or AlmaLinux.

Log tapping samples your pipeline's log flow on demand. Filter by labels and investigate problematic syslog events with just a few clicks.

Optimize OTLP throughput and resource usage: our performance tests show how latency and bandwidth relate to compression and multithreading.

The problems of the syslog protocol and how the OpenTelemetry protocol and AxoSyslog ensures seamless and structured data transport across your network.

Silently losing logs? Detect TCP and UDP packet drops in syslog and telemetry pipelines, learn why they happen, and the metrics that catch them early.

How to parallelize syslog message processing to scale syslog over UDP reception on a single node: dos, dont's, and trade-offs, and the power of eBPF.

syslog over UDP drops messages under load. The exact kernel and syslog-ng buffer tuning to minimize loss — settings you can apply today.

Syslog over UDP can drop 30–40% of messages. Why packets are lost and the kernel + syslog-ng tuning that stops it — without ripping out UDP.