Linux Agent for SIEM Log Collection | Voters

Linux Agent for SIEM Log Collection

future planned

David Brindley

I am interested in deploying a Linux agent to collect SIEM logs. It would be beneficial if this feature could be included when Linux support for EDR is rolled out, as it would streamline the process of managing logs across different operating systems.

Created by Autopilot

July 3, 2025

Matthiew Morin (Huntress)

marked this post as

future planned

Jonas Schirmer Hanssen

It would be very beneficial if we can setup some simple linux-based machines on-site that acts as firewall log collectors.

Matthiew Morin (Huntress)

Merged in a post:

Support for forwarding Linux syslogs to SIEM

Mike Knight

I would like to forward syslogs from a Linux server over 514/udp to a collector. Currently, there is no support or documentation available for sending these logs from the Huntress portal. It would be beneficial to have this capability to enhance data collection and integration with existing systems.

October 13, 2025

Matthiew Morin (Huntress)

Merged in a post:

Linux Agent SIEM Collector

Andrew Brookfield

It would be good to see Linux agents to have the ability to be enabled as a syslog collector as we could utilise a Raspberry Pi on-prem for customers if lacking a permanent on-prem device.

October 13, 2025

Cody Arnold

+1, this would be nice to have.