Blog

AxoSyslog vs syslog-ng, one year on: 17 releases to 5. Compare the 2025–2026 feature additions, FilterX advances, and release cadence of both syslog projects.

How AxoSyslog implements in-application ACK, flow control, memory and disk buffers, batching, and how log-iw-size interacts with batch-lines under the hood

Detection rules fail silently when parsers miss schema changes. Learn how autonomous classification keeps your fields where your detections expect them.

Schema drift silently breaks parsers and creates detection gaps. Learn how pipeline-layer validation catches drift before your SIEM does.

syslog-ng was the right choice for years, but modern log pipelines demand more than stability. Why log infrastructure needs to evolve, and where to go next.

AxoSyslog 4.18-4.22: FilterX enhancements, better ClickHouse and S3 outputs, OTLP keep-alive, and smarter worker autoscaling for log pipelines.

Learn how a leading U.S. healthcare company used Axoflow to gain log observability, improve syslog-ng monitoring, and cut data costs by 30% in days.

What's new in AxoSyslog 4.13-4.17: advanced log formatting, smarter parsing, cloud integrations, and performance tuning for reliable pipelines.

AxoSyslog: the syslog-ng fork built by its original developers. Secure, supported, binary-compatible log management with enterprise features.

AxoSyslog, our syslog-ng fork, moves to a single clear open source license: GPL-3.0-or-later. What changes for users and contributors.

Activity report of the first year of AxoSyslog, our drop-in syslog-ng fork.

Turn messy firewall logs into clean, SIEM-ready data. FilterX parses FortiGate, Palo Alto, and SonicWall logs and routes them accurately — see how.

Route syslog data to Grafana Loki with AxoSyslog, the drop-in syslog-ng replacement. Dynamic labels, less noise, scalable ingestion — full config inside.

Upgrade syslog-ng to AxoSyslog in minutes with no configuration changes. What the drop-in replacement means and how the migration works.

AxoSyslog 4.10 adds Google Pub/Sub gRPC, Microsoft Sentinel, and Azure Monitor destinations. Key features and configuration examples inside.

AxoSyslog 4.9 adds ClickHouse as a destination: send logs directly to your self-hosted ClickHouse database for efficient storage and analysis.

Six months into AxoSyslog, the binary-compatible syslog-ng fork: development activity, new features, and what's ahead for the project.

AxoSyslog 4.9 highlights: ClickHouse destination, gRPC improvements, new FilterX features, and bug fixes for the AxoSyslog and the syslog-ng projects.

Learn how to install AxoSyslog, our syslog-ng™ fork from our repository on RPM-based Linux distributions like RHEL, Fedora, or AlmaLinux.

AxoSyslog 4.8 release with APT repository, gRPC and S3 destination improvements, and the ability to send logs to Elasticsearch data streams

AxoSyslog is now a real fork of syslog-ng: still open source under the same license, actively maintained with new features from its creators.

Metrics, management, and alternatives for syslog-ng Premium Edition. Modernize your syslog-ng based logging infrastructure without disrupting your deployments!

syslog-ng 4.7 brings better OpenTelemetry performance, gRPC improvements, new metrics, and features to integrate your telemetry pipeline.

Metrics and management for telemetry pipelines based on Syslog Connect for Splunk (SC4S) and Splunk: observe your telemetry pipeline in real time!

Metrics and management for syslog-ng based enterprise logging: gain visibility into your telemetry pipeline health and reduce downtime.

Ship Kubernetes logs to OpenObserve, the lightweight Elasticsearch alternative, with syslog-ng and the Logging operator. Step-by-step AxoSyslog setup.

Silently losing logs? Detect TCP and UDP packet drops in syslog and telemetry pipelines, learn why they happen, and the metrics that catch them early.

Collect logs from the native macOS OSlog or log stream with syslog-ng's new darwin-os sources!

syslog-ng 4.6 allows you to send data directly to Google BigQuery, better collect logs on macOS, parse Windows XML logs, and improves OpenTelemetry performance

syslog-ng in 2023: new features (OpenTelemetry, Google Pub/Sub, Splunk, Grafana Loki, Amazon S3, OpenObserve drivers), contributions, and other developments

Forward Kubernetes logs to Grafana Loki using syslog-ng and the Logging operator with AxoSyslog. Cloud-native setup, dynamic labels, and full config.

Send logs and telemetry data directly to Google BigQuery with syslog-ng, using gRPC

syslog-ng 4.5 integrates your telemetry pipeline to Google Pub/Sub and OpenObserve

Logging operator 4.4 brings multi-tenancy with namespace-based routing, outputs like S3, ElasticSearch, Loki, and Splunk for the syslog-ng aggregator, and more

syslog-ng 4.4 comes with new drivers and lots of new metrics to help you manage your cloud-native and on-premise observability supply chain.

Send structured log messages from syslog-ng to Falcon LogScale via its Ingest Structured Data API, and other destinations in parallel.

Documentation updates for AxoSyslog, the cloud-native syslog-ng distribution: OpenTelemetry support, Splunk HEC destination, eBPF support, and new parsers

Receive or send any kinds of OpenTelemetry logs, traces, and metrics with syslog-ng and AxoSyslog 4.3 using OTLP/gRPC

How to parallelize syslog message processing to scale syslog over UDP reception on a single node: dos, dont's, and trade-offs, and the power of eBPF.

Republishing syslog-ng documentation in a new format, under the AxoSyslog Core name to comply with the syslog-ng Open Source Edition documentation license

How syslog-ng disk buffering protects logs from crashes, network outages, and overload — plus the config to make your syslog architecture resilient.

syslog-ng 4.2 comes with new drivers and lots of new metrics to help you manage your cloud-native and on-premise observability supply chain.

Install syslog-ng using the AxoSyslog Helm charts to send Kubernetes logs into OpenSearch. AxoSyslog is a cloud native syslog-ng distribution by Axoflow.

syslog over UDP drops messages under load. The exact kernel and syslog-ng buffer tuning to minimize loss — settings you can apply today.

Version 4.1 with its new metrics system brings syslog-ng closer to the cloud-native ecosystem and the modern observability supply chain.

Axoflow is happy to announce that our flavored syslog-ng container images are available for download.