Free Download

Windows Event Log
Syslog Forwarder

Monitor and forward Windows Event Logs to any syslog server. Supports UDP, TCP, and TLS with granular filtering policies. Free forever.

Download Free Get Syslog Client from Microsoft Store
Core Feature

Forwarding Policies

Create granular rules to forward specific Windows Event Log channels to syslog servers. Filter by channel, event type, keywords, and event IDs with full RFC format support.

  • Filter by channel (Application, System, Security, Setup, PowerShell)
  • Filter by event type (Error, Warning, Information, Audit)
  • Keyword filtering and event ID include/exclude lists
  • RFC 3164 and RFC 5424 message format support
  • Auto-start forwarding on application launch
Forwarding Policies
Forwarding Policies view 2 Forwarding Policies view 3
Built-in Tool

Event Log Viewer

Browse and query Windows Event Logs directly from within the application. Inspect event details, filter by type, and export results without opening Event Viewer.

  • Query any event channel (Application, System, Security, and more)
  • Filter by type (Error, Warning, Information)
  • Configurable result limit for large logs
  • Event detail inspector with full message view
  • Export results to CSV
Event Log Viewer
Event Log Viewer view 2 Event Log Viewer view 3 Event Log Viewer view 4
Servers

Syslog Server Management

Configure and manage multiple syslog server destinations. Support for UDP, TCP, and TLS protocols with per-server settings and real-time connection monitoring.

  • Add and manage multiple syslog servers
  • UDP, TCP, and TLS protocol support
  • Configurable port and syslog facility per server
  • Per-server enable and disable toggle
  • Connection status monitoring
Syslog Server Management
Syslog Server Management view 2 Syslog Server Management view 3
Diagnostics

Test Connection

Verify syslog server connectivity before going live. Send individual test messages or burst 10 at once to confirm your forwarding pipeline is working end-to-end.

  • Send test messages to any configured server
  • Burst mode — send 10 messages at once
  • Custom message text input
  • Configurable facility, severity, and format
  • Real-time test results log
Test Connection
Test Connection view 2
Customization

Settings & Themes

Customize the application with 12 built-in themes and configure advanced forwarding behavior including disk spooling, event bookmarking, and rate limiting.

  • 12 themes (6 dark + 6 light)
  • Configurable forwarding settings
  • Disk spooling for reliability during server outages
  • Event bookmarking for catch-up on restart
  • Rate limiting with token bucket algorithm
Settings & Themes
Settings & Themes view 2 Settings & Themes view 3 Settings & Themes view 4 Settings & Themes view 5
Documentation

Built-in Manual

A searchable reference guide built right into the application. Get started quickly with step-by-step instructions for forwarding policies, server configuration, and more.

  • Complete getting started guide
  • Forwarding policies documentation
  • Server configuration help
  • Searchable content
  • Always accessible from the sidebar
Built-in Manual

System Requirements

Operating System
Windows 10 / 11 (64-bit)
RAM
2 GB minimum
Storage
~50 MB
Admin Privileges
Required for Security Event Log access

Frequently Asked Questions

What is NetPilot Syslog Client? ▼
A free Windows application that monitors Windows Event Logs and forwards them to syslog servers in real-time. It supports UDP, TCP, and TLS protocols with RFC 3164 and RFC 5424 message formats.
Is the Syslog Client really free? ▼
Yes, completely free with no limitations, no trials, and no subscriptions. Download and use it on as many Windows machines as you need.
What syslog servers does it work with? ▼
Any RFC-compliant syslog server including Graylog, Splunk, rsyslog, syslog-ng, QRadar, and the upcoming NetPilot Syslog Server. It supports standard UDP/TCP on port 514 and TLS on port 6514.
Can I forward Security Event Logs? ▼
Yes. The client can forward from any Windows Event Log channel including Security, but requires administrator privileges to read the Security channel.
Does it support encrypted syslog (TLS)? ▼
Yes. The client supports TLS over TCP per RFC 5425, including server certificate validation, client certificates for mutual TLS, and configurable verification settings.

Start Forwarding Events Today

Free download. No registration required. Works with any syslog server.

Download Syslog Client Get Syslog Client from Microsoft Store Need a Syslog Server?
Scroll to Top