Trunc supported logs
Our system is designed to handle and support any type of logs. Our receiver end point will parse and analyse any content sent to us and store on our full-text database, making them readily available.
We have custom rules for a variety of popular log sources and our team can quickly develop custom rules for any log format as needed.
Supported logs:
- Linux standard Logs
- /var/log/messages
- /var/log/secure
- /var/log/auth.log
- /var/log/syslog
- /var/log/audit
- Apt, dpkg, RPM install and deletion logs, audit logs
- Ubuntu, Red Hat, CentOS and other distributions specific logs
- Windows logs
- Windows event logs are all supported
- Windows event logs via syslog agent (kiwi syslog and others)
- Windows event logs via the Trunc agent
- *BSD logs
- OpenBSD standard logs (from /var/log, including pfd)
- FreeBSD standard logs
- NetBSD standard logs
- Web server logs
- Apache logs (all versions)
- Nginx logs
- HAProxy logs
- WordPress logs
- Error logs from PHP, tomcat, Python, WordPress, Joomla and many other web apps
- Firewall logs
- IPtables logs
- PF logs
- Cisco firewall logs
- Checkpoint firewall logs
- Ubiquiti logs
- Router logs
- Cisco routers
- Juniper routers
- Arista routers
- UI Ubiquiti and Amplify routers
- Security product logs
- OSSEC logs
- Snort IDS/IPS logs
- Suricata IDS/IPS logs
- ClamAV logs
- Many other AVs and security products
- Office 365 Logs
- Linode Logs
And those are just some examples. We are constantly adding new log formats and even custom web applications. Try it out for yourself with our free trial or contact our support team at support@noc.org if you have any questions.
