New Syslog Manager v1.1.1 is out

Network visibility and recovery, on your own servers.

Windows software for network and security teams. Collect and search every log, back up every Cisco config — with no cloud account, and no data leaving your network unless you decide it should.

  • 100% on-premises
  • Runs as a Windows Service
  • Published SHA-256 checksums
Syslog Manager — live view (demo) LIVE
1,284msgs / sec
146devices
3open alerts
17Built-in vendor parser packs
5Ingest sources: UDP, TCP, TLS, SNMP, Win Events
4Access roles with per-user scope
0Cloud or third-party dependencies
VSoftSol Syslog Manager

Every log from every device — collected, parsed, and searchable.

One Windows Service. No Elasticsearch, no Java, no Docker, no message broker.

Collects UDP, TCP, TLS, SNMP trap, and Windows Event Log traffic, and parses it with 17 built-in vendor packs — Cisco IOS/IOS-XE and ASA, Fortinet, Palo Alto, Juniper, MikroTik, Ubiquiti, Check Point, Sophos, SonicWall, pfSense/OPNsense, Aruba, Huawei, VMware ESXi, and Linux — or with extractors you write yourself.

Nothing about it needs the internet to run. The one exception is entirely opt-in: an update checker, off by default, that only offers a release after its cryptographic signature has verified.

11.8 MB Released Sep 23, 2026 Windows Server 2019+ / Windows 10 / 11 (64-bit)
https://syslog.local/dashboards/network-overview
Messages today4.82M▲ live
Devices146all reporting
Alerts32 ack'd
Messages / minutelast 30 min
Cisco IOSASAFortinetPalo AltoJuniperMikroTik+11 more
Nothing is ever droppedEvery message is kept exactly as it arrived — even from a vendor with no built-in parser.
Secure by defaultHTTPS-only console, role-based access, optional TOTP MFA, and a tamper-evident audit log.
No extra infrastructureOne installer. No Elasticsearch, no Java, no Docker, no message broker.
Yours to extendAdd support for any device from the built-in Pattern Tester — no code change, no new release.

From install to first message, fast

Install

Run the signed MSI, then walk through a five-step first-run wizard that sets up your admin account and HTTPS certificate.

Point your devices at it

A “Waiting for messages” page shows copy-ready configuration commands with this server’s own address filled in, and opens the dashboard the moment the first message arrives.

Search, alert, report

Query with a real search language, build rules and alerts, watch live dashboards, and schedule PDF/CSV reports by email.

Everything you need to collect, watch, and report on your logs

Universal syslog collection

UDP, TCP, and TLS syslog listeners, plus SNMP v1/v2c trap intake and an authenticated Windows Event Log forwarder endpoint.

17 vendor parser packs, plus your own

Popular firewalls, switches, and servers ship parsed out of the box; the Pattern Tester lets you build and save GROK/regex extractors against a real sample message.

A real search language

Field filters, quoted phrases, boolean operators, ranges, and wildcards — compiled to parameterised SQL, never string-built.

Rules & alerts

Per-message rules with retried actions (email, webhook, syslog forward, and more), plus aggregation and device-silence alerts with acknowledge/resolve so a spike doesn’t spam you.

Live dashboards

A generic widget framework — any data source, any aggregation, any visualisation — with four shipped defaults including Network Overview.

Scheduled PDF/CSV reports

Build a report once, run it on demand or schedule it, and have it emailed — including canned compliance templates such as a 90-day PCI-DSS report.

Hot / warm / cold retention

Tiered storage with compressed, SHA-256-verified archives and one-click restore — with a disk-usage projection shown before you save a policy.

Roles, MFA & audit trail

Four roles with per-user visibility scope, optional TOTP MFA, Argon2id password hashing, and a hash-chained audit log so nothing quietly disappears.

Config bundles

Export and import rules, streams, devices, users, dashboards, reports, and vendor parser packs as one signed, portable file.

Self-monitoring

The collector watches its own queue depth, dropped messages, disk space, and archive integrity — and alerts you when something needs attention.

Opt-in signed updates

Off by default. When enabled, it checks for a new release, downloads it, and verifies its signature and hash — you always run the installer yourself.

Runs as a Windows Service

Installs once under a dedicated least-privilege account and keeps collecting through reboots, logons, and logoffs — managed from a self-hosted HTTPS dashboard.

What’s new in v1.1.1Opt-in signed update check, fixes to config export and report downloads, and an installer prerequisite-check fix.
Read the release notes →
vSoft-Network-Backup

Cisco config backup and recovery you can rely on.

Automatically collect, store, and organize device configurations — and recover in minutes after a config loss or device replacement.

A built-in SFTP server gives devices and scripts a secure, central place to push backups, alongside the standard SSH pull workflow. Whether you manage a small office or a large multi-site environment, your configurations stay protected, accessible, and ready.

A one-click Full System Backup snapshots the entire install — devices, credentials, schedules, and settings — so the tool itself can be restored in minutes if anything goes wrong on the server it runs on.

v2.9.6 Build 022 (Beta) 25.4 MB Windows 10 / 11 (64-bit)
https://netbackup.local/devices/core-sw-01/diff
core-sw-01 · running-configprevious → latest
interface GigabitEthernet1/0/24
- switchport access vlan 20
+ switchport access vlan 30
spanning-tree portfast
!
+ ntp server 10.0.0.10 prefer
logging host 10.0.0.25
edge-rtr-02Backing up…
core-sw-012 changes · just now
dist-sw-07No change · 02:00

Everything you need to protect your network configs

Scheduled config backups

Set daily, weekly, or custom schedules per device and let vSoft-Network-Backup pull configs automatically — no manual exports.

Full System Backup & Restore

One-click, same-machine disaster-recovery snapshot of the whole install — devices, credentials, schedules, and settings — restorable in a few clicks.

Built-in SFTP server

A secure, central location for devices or scripts to push backup files to, alongside the standard SSH pull workflow.

Version history & diff view

Every backup is kept and diffable against the previous run, so config drift is easy to spot.

Encrypted credential vault

Device credentials are protected with Windows DPAPI, never stored in plain text and never shown back in the UI.

MFA, RADIUS & TACACS+

Admin login supports TOTP-based multi-factor authentication, and can defer to your existing RADIUS or TACACS+ infrastructure.

SSH host-key verification

New devices require explicit host-key approval, protecting you from silent man-in-the-middle swaps.

SIEM export

Forward security-relevant audit events to your syslog/CEF-speaking SIEM — nothing extra to configure beyond a destination.

Local HTTPS dashboard

Manage devices, schedules, and backup history from a self-hosted web UI that only your network can reach.

Runs as a Windows Service

Installs once and keeps running in the background — through reboots, logons, and logoffs.

Why Vision Software

Built for teams who run their own network

Three principles guide every release.

01

On-premises by design

No cloud account, no telemetry, no external services. Both products run entirely on your own Windows machine and your own network.

02

Security from day one

HTTPS-only consoles, MFA, role-based access, encrypted credentials, and tamper-evident audit logs are built in — not bolted on.

03

Verifiable releases

Every installer is published with its SHA-256 checksum and full release notes, so you always know exactly what you are running.

FAQ

Frequently asked questions

What are the system requirements?

Syslog Manager runs on Windows Server 2019 or later, or Windows 10 / 11 (64-bit), and needs the ASP.NET Core 8 Runtime (Hosting Bundle) installed first. vSoft-Network-Backup runs on Windows 10 / 11 (64-bit). Run both installers as Administrator.

Do the products need an internet connection?

No. Both run entirely on your own network. Syslog Manager has one optional feature that uses the internet — an update checker that is off by default and only offers releases whose cryptographic signature verifies.

How do I upgrade to a new version?

Download the latest installer and run it as Administrator over your existing install — no need to uninstall first. Your data, settings, and certificates are preserved. See the upgrade guide for details.

How can I verify a download?

Each release lists its SHA-256 checksum on the Updates page. On Windows, run certutil -hashfile <file> SHA256 and compare the result.

Which devices does Syslog Manager understand?

It stores every message it receives, from any device. 17 built-in packs parse Cisco IOS/IOS-XE and ASA, Fortinet, Palo Alto, Juniper, MikroTik, Ubiquiti, Check Point, Sophos, SonicWall, pfSense/OPNsense, Aruba, Huawei, VMware ESXi, and Linux — and the Pattern Tester lets you add your own.

Ready to take control of your network?

Download either tool and be up and running in minutes — on your own hardware, under your own control.