Carrier-Grade Syslog

ISP Syslog Server. CGNAT compliance & high-throughput logging.

Ingest high-frequency syslog streams from MikroTik routers, GPON OLTs, BNG gateways and RADIUS servers while maintaining encrypted CGNAT audit archives for law enforcement compliance.

Request tailored demo Talk to an architect
LIVE UI
ISP syslog server dashboard showing CGNAT compliance logging and audit search
Click to View Full UI
Actual Kashtrix application workflowKashtrix Operating System
100K+ msgs/s
Operating model
Encrypted
Decision speed
CGNAT-ready
Architecture
Auditable
Control
Core capabilities

Core capabilities for ISP and telecom operations.

Syslog

High-Throughput Ingestion

Process over 100,000 syslog messages per second via UDP/TCP 514 and TLS.

CGNAT

CGNAT Audit Archiving

Log public IP and port mappings to private subscriber profiles with 1-year compliance.

Multi-Vendor Parsers

Standardized syslog parsers for MikroTik, Cisco, Huawei, Nokia, and OLTs.

Automated Alarm Triggers

Transform syslog fiber attenuation and BGP flaps into field work orders.

Live Log Filtering

Filter logs by severity, facility, subscriber ID, or public IP ranges in sub-seconds.

Product tour

See operational context without turning the website into a dashboard.

The product view is presented as evidence inside a public marketing story—showing how teams move from signal to action while the surrounding page stays focused on business outcomes.

LIVE UI
ISP syslog server dashboard showing CGNAT compliance logging and audit search
Click to View Full UI
Live product capabilityKashtrix Operating System
Connected workflow

How it works: from network signal to operational outcome.

  1. 01

    Listen on Port 514

  2. 02

    Parse facility payload

  3. 03

    Index subscriber & IP

  4. 04

    Archive encrypted log

  5. 05

    Surface alarms

Kashtrix Syslog & CGNAT Archiving

Kashtrix Syslog — Carrier-Grade Log Management & CGNAT Compliance.

Ingest over 100,000 syslog messages per second from MikroTik, Cisco, OLTs, and BNGs. Store tamper-proof CGNAT public-to-private IP mappings for mandatory law enforcement audit compliance.

Live NAS ↔ RADIUS & Syslog Packet Telemetry

Real-Time AAA & Syslog Stream Animation

Interactive packet transmission between Router / NAS gateways and Kashtrix RADIUS + Syslog engine.

Port:

MikroTik / Cisco

NAS / Edge Router

PPPoE ServerActive
Hotspot ServerReady
DHCP ServerOption 82
Port 1812
Access-Request(Username + Password + NAS-IP-Address)
Port 1812
Access-Accept / Reject(Bandwidth Speed, IP Pool, Session-Timeout)
Port 1813
Accounting-Request(Start / Interim-Update / Stop (Octets & Packets))
Port 1813
Accounting-Response(Acknowledged & Logged to Billing Ledger)
Port 514
Syslog NAT Event(CGNAT Public:Port -> Private IP & MAC Mapping)

Kashtrix Radius

RADIUS + CRM Server

Free RADIUS AAA50K Req/s
User DatabaseSynced
Billing EngineConvergent
Kashtrix Syslog for ISP · Full Feature Map
Overview
Live Logs
Subscribers
Devices
Log Sources
Alerts
Incidents
Saved Searches
Parsing Rules
Correlation Rules
Dashboards
Reports
RADIUS
CGNAT Search
IP History
DNS Analytics
Traffic Flows
Retention
Storage
Integrations
Audit Logs
Server Settings
Collector
High Throughput

100K+ Msgs/Sec Collector

High-performance UDP/TCP Port 514 and TLS 6514 syslog daemon with zero-packet loss buffer queues.

Legal Compliance

CGNAT Law Audit Log

Links NAT public IP + port ranges to private subscriber accounts with encrypted 1-year compliant archiving.

Vendor Agnostic

Multi-Vendor Parsing

Pre-built regex syslog parsers for MikroTik RouterOS, Cisco IOS-XR, Huawei VRP, Nokia SR-OS, and OLTs.

Auto Remediate

Automated Alarm Trigger

Transforms syslog fiber attenuation and BGP flaps into actionable tickets and field tasks.

Live ISP Syslog Stream Console

Port 514 UDP/TCP · Active Stream (100K msgs/sec)

2026-07-31 02:48:12.102CGNAT[ASR9k-CGNAT-01]BIND PUBLIC 103.21.4.12:4012 -> PRIVATE 10.40.12.8:5020 PROTO=TCP SUB=KARNKALYAN_091
2026-07-31 02:48:12.440INFO[Radius-Core-01]Access-Accept username=karnkalyan_fiber nas_ip=10.3.2.140 reply=100Mbps_Profile Framed-IP=10.40.12.8
2026-07-31 02:48:13.018WARNING[OLT-GPON-04]ALARM PON 1/12: Optical attenuation reached -27.4 dBm on ONU DF5F-2510002575. Threshold is -27.0 dBm.
2026-07-31 02:48:13.882CRITICAL[MikroTik-CCR2216]ether1-peering link DOWN. Primary BGP session to AS13335 (Cloudflare) changed state to Established -> Idle.
2026-07-31 02:48:14.210CGNAT[ASR9k-CGNAT-01]UNBIND PUBLIC 103.21.4.12:4012 -> PRIVATE 10.40.12.8:5020 DURATION=1420s BYTES_TX=14.8MB
2026-07-31 02:48:15.004INFO[TR069-ACS-02]Inform 2 PERIODIC from CPE HW_DF5F_9012. Parameters updated: InternetGatewayDevice.WANDevice.1.WANDSLInterfaceConfig
2026-07-31 02:48:15.420WARNING[BNG-Core-02]PADT received for session ID 14209 (user=ram_broadband). Session terminated cleanly. IP returned to pool.
Showing 7 syslog entries · Tamper-Proof Encrypted Storage
Carrier-Grade ISP Syslog Infrastructure

Comprehensive CGNAT & Legal Syslog Audit Architecture

Designed specifically for tier-1 telecom operators and ISPs to ingest 100,000+ events per second (EPS), correlate CGNAT NAT444 subscriber sessions, enforce DoT / TRAI legal compliance, and provide sub-second law enforcement subpoena lookups.

Deterministic NAT & Dynamic Pools

Deterministic Port Allocation & High-Velocity Ingestion

Kashtrix Syslog Server ingests UDP/TCP log streams from CGNAT routers (Cisco ASR9k, MikroTik CCR, Huawei NE40E) and stores subscriber public IP, source port range, timestamp, and destination mapping.

Tamper-Proof HMAC Cryptographic Seals

Every ingested log chunk is signed with SHA-256 HMAC checksums to guarantee legal admissibility in court.

Zero Message Loss Architecture

Buffered Ring Architecture handles network traffic bursts up to 250,000 EPS without dropping packets.

Kashtrix CGNAT Syslog Ingestion Control Screen

Live Application Console Showcase

High-definition interactive console screens for NOC monitoring, syslog audit, and device telemetry.

Kashtrix Live Log Ingestion Console
Real-Time Ingestion

Syslog Stream Ingestion

Kashtrix Legal Compliance Audit Search
Legal Compliance

Subpoena Search Console

Kashtrix Storage Tiering Archiving
S3 / Glacier Tiering

Hot Cold Storage Vault

Kashtrix Alarm Correlation & Alerts
Alarm Engine

Fault Correlation Matrix

Integrates with your existing ISP infrastructure.

Connect existing network, finance, subscriber and operational systems through APIs, events and managed adapters.

Network and AAA systems
Finance and payment services
Customer communication channels
Open APIs and event webhooks

Modernize ISP operations without disrupting your network.

Plan a phased rollout around your current ISP systems, subscriber base, network devices and commercial priorities.

Build your rollout plan