Graylog vs. Nagios Log Server

If you already have a basic understanding of Elasticsearch and/or MongoDB, Graylog will be a great fit when it comes to log aggregation. It will be a decent option even if you don't have any experience but have the time and willingness to roll up your sleeves that learning those tools will require. Graylog supports plugins to extend functionality for things like SNMP traps, telemetry collection, and solar flares. As is the case with most software with plugins, if the core functionality for which you are looking (i.e. not logging) is based on a plugin, Graylog probably isn't for you. The majority of the plugins in the marketplace are developed by third-parties looking to solve their specific use case so bug fixes and new features are not a given.

Incentivized

Nagios Log Server facilitates the ability to search all entries of logs in a quick and easy way. Beyond that, it has allowed us to configure alerts for notification when there are potential threats (may they be security threats or only application-side problems), and to filter the data for audits and compliance.

Incentivized

• Very fast process of hugh amounts of information
• Easy to built dashboards with rich visual display
• Intuitive filter string auto-complete
• Alerts based on differents scenarios and triggers

Incentivized

• Log auditing.
• Server monitoring.

Incentivized

• Configuration can be hard to understand
• More quickly and easy ways to search for data
• Auto-categorization of log entries would be excellent

Incentivized

• A bit hard to install and configure.
• High price.

Incentivized

Graylog is more on the technical side of user interface, with a steep learning curve that can be challenging for non-tech people. Once its logic is understood, however, its great to use and people have no issues to find the information they need. It's configuration is also not that easy, however this we consider impossible to avoid in spite of the type of service it does

Incentivized

Community support does not give simple straightforward answers; simply search up Graylog Issues and look at some of the responses on the forums. The documentation is your only hope if you are on the free version, as you can NOT purchase only support. The few times I have worked with Graylog Enterprise support they were great though.

Incentivized

Nagios support is decent. Nothing bad to say about them, but nothing extraordinary too. We mostly asked them questions instead of actively asking them to change or fix things for us. The response time is OK, commonly you can get a response in the same day. You can also call, but they are available only during US office hours.

Incentivized

Azure Monitor is not exactly what I mean, but I couldn't find Azure Application Insights. Anyway, for a large organization, Azure makes more sense than using Graylog because a lot of logging will already be inside Azure. And you don't want to have two "central" logging locations. But Azure is chaos and highly "not intuitive." So for small and mid-size organizations, Graylog is still the better option.

Incentivized

Windows Event Log doesn't have 10% of the capabilities of Nagios Log Server. No real-time alerts, no scheduling, no external plugins or APIs. Nothing. The only advantage is that it is a native Windows application.

Incentivized

• Able to offer monitoring services to new and existing clients to increase revenue
• Staff have increased billing percentage
• Potential to expand security services

Incentivized

• We could react in way less time to a lot of potential outages since we started using it.

Incentivized