Graylog is purpose-built to deliver the best log collection, storage, enrichment, and analysis. Graylog is:
Graylog's valuable features include a new interface that enhances cluster performance, real-time access to raw data for analytics, the ability to create pipelines and process logs in various ways, Elasticsearch integration for filters and analytics, detailed search capabilities, and easy integration with Java for dashboarding and performance monitoring. The Community edition also offers good dashboarding and alert capabilities.
Improvements include bringing back the legacy alarm callback feature and including SSO integration. Also, the infrastructure costs associated with using Graylog for analytics are significant and Graylog should consider supporting other backends with cheaper storage or partial parsing of logs. Graylog also needs to improve its authentication and access control features, as well as the way it handles live logging. In addition, creating rules in Graylog could be made easier and more customization options would be appreciated.
Graylog has proven to be a valuable investment for companies. Users have reported positive outcomes and benefits from implementing Graylog in their systems. The return on investment (ROI) has been described as significant, with users experiencing improved efficiency and effectiveness in their log management and analysis.
Graylog's advanced features and capabilities have allowed users to gain valuable insights and take proactive measures in resolving issues and enhancing security.
Graylog offers both a free open-source version and a paid enterprise version. The open-source version is recommended for small companies or those with low traffic. It has a capacity limit of 2 GB daily, but can run on modest hardware. The enterprise version has improved authentication.
Graylog is primarily used for central log management and log aggregation from various sources, including Kubernetes and other containers, user-related logs, and non-security events. It is also used for monitoring logs for system errors, bug tracking, and analytics, with features such as graphs, dashboards, and pipelines for transforming raw logs into metrics and health checks.
Graylog's customer service and support are rated positively Some users rely on the community support forum to solve their queries, while others have not encountered any issues with the platform and have been able to find solutions on their own through resources like Stack Overflow. Technical support is generally rated around four out of five, with some users noting that response times can vary depending on location. It's important to note that support is not offered with the Community edition of Graylog.
The initial setup for Graylog is generally easy and straightforward, especially for small environments with standalone instances. However, setting up a highly scalable cluster can be complex. Some users struggled with the setup but found it manageable with support.
The scalability of Graylog depends on Elasticsearch, which is complex but scalable. Adding new nodes to the cluster can be tedious, but it can handle large amounts of traffic and users. The cost can be an issue, but it has worked well for companies with 40-300 users.
The stability of the solution of Graylog is generally good, with some users reporting occasional hiccups or issues when using certain microservices. If the solution is not overloaded and used within its capacity, it runs smoothly and is considered stable.
Graylog was previously known as Graylog2.
Blue Cross Blue Shield, eBay, Cisco, LinkedIn, SAP, King.com, Twilio, Deutsche Presse-Agentur