Send to Syslog Server
  • 13 Sep 2022
  • 1 Minute to read
  • Dark
    Light
  • PDF

Send to Syslog Server

  • Dark
    Light
  • PDF

The Send to Syslog Server action sends a message with the action results summary to syslog and optional messages with the device data for each of the devices in the query results as a JSON file. It sends a JSON file with data about the system entity queried, for queries created on Activity logs and Fetch History using filters.

To use this action, you must enable the Use Syslog setting and configure a Syslog host and port. For more details, see Global Settings.

To configure the Send to Syslog Server action, do as follows, from the Action Library, click Notify, and then click Send to Syslog Server.

The message includes:

  • The Enforcement Set name
  • The triggered query
  • The condition for executing the Enforcement action (if it exists)
  • The number of current and previous results

Message Example

Click to see a message example

Alert - "test" for the following query has been triggered: Missing Sophos

Alert Details
The alert was triggered because: The number of entities is above 0
The number of devices returned by the query:4
The previous number of devices was:4

You can view the query and its results here: https://demo-latest.axonius.com/devices?view=Missing Sophos


Action Settings

Click to view Connection Settings
  1. Send result details (required, default: False) - Select whether to send additional messages to syslog with the details of the results.
    • If enabled, in addition to the default Syslog message, Axonius will send a JSON file with details of the results.
    • If disabled, Axonius will send to Syslog only the default message.
  2. Message severity (required, default: info) - Select the message severity: info, warning or error.

To learn more about configuring Enforcement Sets, see Configuring Enforcement Sets.


First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.