Syslog Python Packages

rfc5424-logging-handler

An RFC5424-Compliant Syslog Handler for the Python Logging Framework

49K 52 25

cefevent

ArcSight's Common Event Format library

14K 39 14

cee-syslog-handler

Python Syslog Logging Handler with CEE Support

9K 7 0

tlssysloghandler

SysLogHandler with TLS

5K 6 0

hat-syslog

Syslog Server and tools

2K 151 3

axosyslog-light

AxoSyslog - the scalable security data processor

2K 117 33

aiosyslogd

Asynchronous Syslog server using asyncio, with an optional uvloop integration and SQLite backend.

1K 0 0

vamp-log-hunter

VampSecure Labs — Cazador de IoC en logs del sistema (nginx/auth/syslog)

1K 1 0

wpwatcher

Wordpress Watcher is a wrapper for WPScan that manages scans on multiple sites and reports by email and/or syslog. Schedule scans and get notified when vulnerabilities, outdated plugins and other risks are found.

866 47 17

sigwood

Local-first threat hunting for the logs you already have: Zeek, Pi-hole, syslog or the systemd journal, CloudTrail. Every run names the technique behind each detector. No agent, no daemon, no black box - between grep and a SIEM.

774 109 6

syslog-postmortem

Turn journalctl and syslog into a ready-to-edit incident postmortem in seconds — timeline, failure patterns, cascading failures and action items.

678 0 0

alerta-elastalert

Contributed integrations, plugins and custom webhooks

641 124 175

netlog-ai

v0.7.0 incident handoff. AI-powered network log analyzer with LLM-assisted RCA (Junos / EOS / FRR / SONiC / Cumulus). Local, Claude, or Grok. Sanitize-before-share. MIT.

594 11 4

vent

Vent is a light-weight platform built to automate network collection and analysis pipelines using a flexible set of popular open source tools and technologies. Vent is python-based, extensible, leverages docker containers, and provides both an API and CLI.

550 78 34

syslog2cef

Python package and CLI to convert syslog (RFC3164/RFC5424, rsyslog, journald) into ArcSight CEF, with mappings for Cisco ASA/IOS, F5, Linux, and VMware

512 1 0

napalm-logs

Cross-vendor normalisation for network syslog messages, following the OpenConfig and IETF YANG models

508 145 46

logdissect

CLI utility and Python module for analyzing log files and other data.

331 161 23

nfsinkhole

nfsinkhole is a Python library and scripts for setting up a Linux server as a sinkhole (monitor, log/capture, and drop all traffic to a secondary interface).

266 12 3

ostrace

Stream, inspect and export iOS device logs on Windows, macOS and Linux — structured os_log records over os_trace_relay, not just NOTICE-tier syslog text.

185 1 0