Solutions — Log Collection, Monitoring, Alerting, Archiving

01 · Collection

Centralized Log Collection

The platform's foundation is lossless delivery from every source. It supports every syslog flavor, with and without agents.

Syslog receiver — RFC 3164 (BSD) and RFC 5424 (IETF) over UDP/514, TCP and TLS
Windows agent — real-time forwarding of Event Log channels (Application, Security, System)
SNMP traps & file tailing — trap receiver and text-based log file tracking
Buffering — local queueing during outages, automatic replay on reconnect
Auto source discovery — new devices appear in the panel the moment they start sending

10:42:01 fw-hq-01 INFO session open src=10.0.4.18 dst=142.250.1.4 proto=tcp/443

10:42:01 sw-core-02 INFO %LINK-3-UPDOWN: Gi1/0/24, changed to up

10:42:02 srv-db-01 WARN disk usage /var 87% — threshold 85%

10:42:03 win-dc-01 AGENT EventID 4624 — successful logon (j.doe)

10:42:04 ap-lobby-07 INFO client assoc 7c:2a:.. rssi=-61 ssid=Guest

10:42:05 syslog-core QUEUE 4,218 msg/s — 0 lost, 312 active sources

02 · Monitoring

Real-Time Monitoring

Collecting is not enough; you must also know the stream is healthy. The monitoring module watches both your logs and the logging infrastructure itself.

Live stream view — filterable real-time log tailing (severity, source, text)
Silent-source detection — automatic alert when a device stops sending (critical for compliance)
Volume dashboards — per-source log volume with anomaly trends
Service health — disk usage, queue length and stamping status at a glance

03 · Alerting

Alerting & Notifications

The rule engine evaluates every incoming line in real time. Critical events reach the right person over the right channel within seconds — without alert fatigue.

Rule types — threshold (N events in X minutes), pattern (regex), absence (expected log missing), correlation
Channels — email, SMS, webhooks (Slack, Teams, PBX, NOC tooling)
Escalation — unacknowledged alerts hand off to the next level automatically
Noise control — deduplication, maintenance windows, quiet hours

04 · Search & Analytics

Results in seconds across millions of records

When a lawful request arrives or you are chasing an outage, minutes matter. The indexed search engine combines date range, source, severity and free-text queries.

Full-text search

IP, username, MAC, session ID... Search raw messages and parsed fields; export results as CSV.

Correlation view

Merge an IP's trail across firewall, hotspot and server logs onto one timeline; reconstruct the incident in minutes.

Saved queries

Save frequent searches, pin them to dashboards or turn them into scheduled reports.

05 · Reporting

Outputs ready for management and auditors

Scheduled reports

Daily/weekly/monthly PDF or CSV reports delivered automatically to the addresses you define.

Ready-made templates

Access summaries, security events, bandwidth, top sources, session dumps and audit trails.

Custom templates

Enterprise plans include custom report templates built from your own filters and views.

06 · Integrity

Timestamping & Signing

A log is only evidence if it can be proven unaltered. SYSLOG automatically digests each day's log files and seals them with qualified timestamps.

SHA-256 digest — cryptographic fingerprints of daily files
RFC 3161 stamp — qualified timestamps from an authorized provider (Law 5070)
Verification tool — produce an integrity proof in one click during audits
Stamp archive — timestamp tokens stored and backed up alongside the logs

Read the timestamping guide

07 · Retention

Retention & Archiving

Regulation demands at least 2 years; tiered architecture delivers it at low cost.

Hot tier

Recent logs stay indexed and instantly searchable; dashboards and alerts feed from this tier.

Instant search

Cold archive

Older records are compressed (up to 10:1) and moved to low-cost storage; restorable on demand.

Compression · 2+ yrs

Redundancy

Cloud plans store logs on redundant infrastructure; on-premise deployments support replication to a secondary target.

Replication

08 · Deployment

Cloud, on-premise or hybrid

Aspect	Cloud SYSLOG	On-Premise	Hybrid
Hardware investment	None	Your own servers	Partial
Time to deploy	Minutes	1-2 days	1-2 days
Data location	Redundant cloud (TR)	Entirely in-house	Critical data on-site
Maintenance & updates	Ours	Yours (supported)	Shared
Scale	25–400+ devices	Unlimited / ISP scale	As needed
Timestamping & compliance	Included	Included	Included

Platform solutions