Monitoring

Log CollectorNew

Manages log ingestion sources and Hakware Collector agents across your environment — giving you full visibility into what is being collected, collection health, and log volumes per source.

Get a Demo Login to App

Log Collector

Centralised log ingestion and collector management

What it does

Key capabilities

Ingestion Source Management

Register and configure log sources across your environment — servers, firewalls, endpoints, cloud services, and SaaS platforms.

Collector Health Monitoring

Monitor the health and status of every Hakware Collector agent — see which are active, degraded, or offline at a glance.

Log Volume Analytics

Track incoming log volumes per source over time — spot gaps in collection coverage or unexpected volume spikes.

Agent Configuration

Configure collector settings, collection schedules, and filtering rules from a central management interface.

Platform Feed

All collected logs feed directly into Raw Logs, Threat Analytics, UBA, and other Hakware modules for correlation and analysis.

Audit Trail

Full audit trail of collection activity — what was collected, when, and from which source — for compliance and forensic purposes.

Highlights

Why Log Collector?

  • Central management for all log ingestion sources
  • Real-time collector health status across all agents
  • Log volume trending to detect collection gaps
  • Feeds Raw Logs, UBA, and Threat Analytics modules
  • Full audit trail for compliance evidence
Request Demo Talk to us
Included in OneView

Log Collector is part of the Hakware OneView platform. All findings, events, and data from this module flow into your central dashboard alongside every other security signal in your environment.

24/7 Support Available
Phone: +27 060 984 1210
FAQs

Frequently asked questions

Hakware Collector agents are installed on infrastructure hosts and listen on port 514 for syslog-forwarded events from nearby devices — firewalls, switches, servers, and endpoints. Collected events are forwarded to the Hakware platform over an encrypted channel, where Log Collector records ingestion source, volume, and health per agent.

Log Collector displays the current status of every enrolled collector agent: active (receiving and forwarding events normally), degraded (receiving events but with gaps or errors), or offline (no events received within the expected interval). Agents that go offline generate alerts in the Event Manager so the collection gap is noticed immediately.

Log Collector's volume analytics track the ingestion rate per source over time. A sudden drop in log volume from a specific firewall or endpoint — which might indicate that a logging configuration was changed or a log forwarding service crashed — is surfaced as an anomaly, preventing silent monitoring blind spots from going undetected.

Log Collector feeds data to Raw Logs (searchable raw event access), Threat Analytics (behavioural threat dashboards), User Behaviour Analytics (anomaly detection per user), and the Event Management correlation engine. It is the foundational data ingestion layer that enables all SIEM-like capabilities in the platform.

Related modules

Raw LogsNew

Full event log access from every Hakware Collector agent

Learn more

See Log Collector in action

Request a personalised demo and we'll show you exactly how Log Collector works within your environment.

Request Free Demo All Modules