Syslog

Netdata ingests syslog from network devices through an OpenTelemetry Collector: the Collector listens for syslog over UDP or TCP, parses RFC 3164 or RFC 5424 records, and forwards them over OTLP to a Netdata Agent, which stores them in its indexed log store and shows them in the Logs tab under the otel-logs source — next to the same devices' SNMP metrics, traps, and flows.

The setup is documented in the OpenTelemetry section:

• Syslog from Network Devices — what to expect in the Logs tab.
• OpenTelemetry Collector Setup — a working receiver configuration and how to make it durable.
• Securing the OTLP Endpoint — TLS and network controls for the receiving Agent.

Related device data under Network Performance Monitoring: SNMP Traps and Network Flows.