Axoflow Launches AxoDetect, Bringing Detection Into the Pipeline and Making the SIEM Optional
Axoflow launches AxoDetect in early access, running customer Sigma rules in the data pipeline to cut SIEM ingest costs and make full SIEM feeding optional.
Axoflow announced AxoDetect, now in early access and unveiled at Splunk .conf26, which runs customer Sigma rules directly in the security data pipeline on normalized data. Alerts travel to the SIEM while full-fidelity logs land in AxoLake, a low-cost on-prem-capable security data lake. The company cites a global industrial company cutting SIEM costs 50% and mean time to resolution 85%, and a government agency cutting data volume 80%.
- Runs customer Sigma rules in-stream on normalized data before SIEM ingest
- Alerts go to the SIEM; full-fidelity logs stored in low-cost AxoLake data lake
- Cited results include 50% SIEM cost cut and 85% faster mean time to resolution
- Announced at Splunk .conf26; built by syslog-ng creator Balázs Scheidler
- Organizations
- Axoflow
From the original article
2 min read at gbhackers.com
Stamford, CT, September 16th, 2026, CyberNewswire Now in early access, AxoDetect runs Sigma rules in stream alerts travel to the SIEM, and full-fidelity logs land in AxoLake, a low-cost security data lake Detection engineers do not need more detections. They need their existing detections to fire earlier, on cleaner data, without paying SIEM ingest rates […]
By CyberNewswire · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.