Live online training · 16–17 September 2026
AxoSyslog Foundations
Gábor ILLÉS
Cybersecurity trainer (CISM), founder Techlabify, co-founder CyberIslands
16 Sep
09.00–17.00 CEST • both days
2 days
Reserve your seat
Why attend?
Log pipelines are usually learned the hard way: in production, under pressure, with a SIEM waiting on the other end.
This is two days of building one properly instead. Nine hands-on labs, 44% of course time at the keyboard — not watching slides.
- Day 1 — Get it working. Install AxoSyslog, collect from four sources, deliver to three destinations, and read any message passing through it.
- Day 2 — Make it production-shaped. Write and validate the config by hand, reload without a restart, chain client → relay → server, route one feed five ways, and prove a disk buffer drains with nothing lost.
You leave with a pipeline you built yourself. Lab environments are provided — nothing to install locally.
Questions we’ll cover
- How do you get AxoSyslog running — package, Docker or Podman?
- How do you collect from files, network, journald and application sources?
- How do you deliver to files, another node and an HTTP backend?
- How do you write a configuration by hand and validate it before it breaks anything?
- How do you reload a live pipeline without dropping messages?
- How do you chain a client through a relay to a server?
- How do you route one feed to the right destinations with filters?
- What happens when a destination goes down — and how do you prove nothing was lost?
Who is this webinar for?
- Sysadmins running log collection
- SRE and platform engineers
- SIEM and security operations teams
Comfort with Linux and the command line is assumed. No prior syslog-ng or AxoSyslog experience is needed.
Speakers
Gábor ILLÉS
Cybersecurity trainer (CISM), founder Techlabify, co-founder CyberIslands
Gábor is a cybersecurity consultant and CISM-certified trainer. As founder of Techlabify he builds the hands-on virtual lab environments this training runs on, so you spend the two days working in a real pipeline instead of setting one up.