You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Many products already send logs to UTMStack v12 through channels we support today:
any device that can send syslog to the UTMStack Collector;
any router, switch or firewall that can export NetFlow or IPFIX to the Collector;
any Windows application that writes to an event log channel the agent already reads (SQL Server, for example, writes failed logins and service events to the Application log);
any Linux service that writes to the system journal (or to syslog on the host), which the agent streams in full.
Customers can't see this. The Integrations page lists only the 33 built-in integrations, so someone running SQL Server, IIS, Nginx or a Ubiquiti gateway concludes we don't support it. Listing these technologies, each with a card and a short guide that explains how its logs reach UTMStack, needs no new parser and no new collector code. It is mostly list entries, icons, text and one reusable guide per channel. The research behind it covers 95 technologies (25 syslog devices, 25 Windows applications, 25 Linux services, 20 NetFlow exporters), each rated "works today", "works after a setting", "partly" or "needs an agent change first".
A "View logs" link that opens the Log Explorer filtered to that technology (each list gives the filter).
Be honest in every guide about what the customer gets: their logs, stored and searchable, and the alert rules that already cover the channel. They do not get vendor-specific fields or a vendor dashboard until someone writes a parser for that product. Where a list says "partly" or "needs an agent change", the guide says so plainly.
Each list is ordered by value to customers and has one checkbox per technology, so you can ship them one at a time. Turn a checkbox into its own issue if it grows.
Owner: @AndresTK89
Why
Many products already send logs to UTMStack v12 through channels we support today:
Customers can't see this. The Integrations page lists only the 33 built-in integrations, so someone running SQL Server, IIS, Nginx or a Ubiquiti gateway concludes we don't support it. Listing these technologies, each with a card and a short guide that explains how its logs reach UTMStack, needs no new parser and no new collector code. It is mostly list entries, icons, text and one reusable guide per channel. The research behind it covers 95 technologies (25 syslog devices, 25 Windows applications, 25 Linux services, 20 NetFlow exporters), each rated "works today", "works after a setting", "partly" or "needs an agent change first".
What adding one technology means
syslog,netflow,wineventlogorlinux). Not a catalog row: the catalog allows one row per data type, and the Windows and Linux agents already own theirs. v12 integrations: groundwork for guide-only integrations (guide list, card names, View logs, syslog guide fix, templates) #2732 sets up the list.frontend/src/features/integrations/constants/systemModules.ts, with the icon file infrontend/public/integrations/.frontend/src/shared/i18n/locales/{en,es,pt,fr,de,it,ru}.json).registerCollectorunderfrontend/src/features/integrations/components/setup/collector/collectors/, built from the shared templates in v12 integrations: groundwork for guide-only integrations (guide list, card names, View logs, syslog guide fix, templates) #2732. In plain words it says: what the product logs, which channel carries it, the exact setting to turn on, and how to check the logs arrived.Be honest in every guide about what the customer gets: their logs, stored and searchable, and the alert rules that already cover the channel. They do not get vendor-specific fields or a vendor dashboard until someone writes a parser for that product. Where a list says "partly" or "needs an agent change", the guide says so plainly.
Sub-issues
Each list is ordered by value to customers and has one checkbox per technology, so you can ship them one at a time. Turn a checkbox into its own issue if it grows.