Graylog Reviews and Ratings

Use Cases and Deployment Scope

We are an ecommerce agency and, with multiple clients and multiple environments per client, having a centralized platform to collect log makes our life a lot easier. Instead of waiting for a developer or devops worker to check for issues, project managers can check the log themselves and then forward tasks quickly.

Likelihood to Recommend

It's an excellent tool for companies with multiple services/environments to monitor, allowing for quick access to logs in a centralized way. However, searching for data can be complicated for new users, and it lacks features to proactivelly alert of new issues and to categorized issues in a way that is easier to monitor.

Use Cases and Deployment Scope

We use Graylog to centralize and organize log data from our many applications running in our environment. Applications running in different operational systems and technologies can be very tricky to analyze their behavior, and that's where Graylog comes with its magic! We built fully functional and customizable dashboards, which makes our job easier, and fast to find, accurate, and act on several bad working applications in our environment.

Likelihood to Recommend

I recommend Graylog to be used in scenarios where log data needs to be analyzed with a rich level of detail and explorability, very close to real-time information. Also, if you need to be alerted based on analyzed data, Graylog also does the job. With many ways to display the processed data, it is very helpful for the day-to-day duties of any IT team.

Use Cases and Deployment Scope

Allows insight into logs from various systems and products that would otherwise be time consuming to access and identify. Dashboards can be customised to your preferences and Alerts/emails can be defined when specific events or patterns occur, which is not possible directly from the log source. Our use case is primarily security related looking at access/sign-in logs from various platforms and then sending alerts as required.

Likelihood to Recommend

Well suited for scenarios such as:

<ul><li> Detecting user OS logins, or user logins from unknown IPs etc.</li><li>Access attempts made on a firewall or other network infrastructure</li><li>Monitoring changes to Active Directory Groups</li></ul>Less suited for scenarios where logs and alerts are time critical, eg.as soon as an event occurs an alert is generated and sent

Use Cases and Deployment Scope

We have more than 60 applications, ranging from websites, Winforms, windows services, API's and console executables. All of them need to log their tracing and/or error information to a central location. It needs to be central because you don't want to search for this location, especially when you only have 5 minutes to solve a problem. We used to have a dedicated database for logging, but this does not eliminate the time lost searching for "the" logs. Also, [the] configuration used to be a manual and self-made business that wasn't always clear. Graylog is a dedicated logging solution that comes "out of the box" and is made accessible through a well-known plugin architecture (log4net if you're developing with the .NET framework).

Likelihood to Recommend

For small companies, Graylog is the best solution possible. It's easy to configure and "just works." Above everything else, it's free. The only thing I hold against it is the fact that it's Linux-based. [This] makes sense because Elasticsearch is Linux-based. But Linux adds a layer of complexity that we don't need for something basic as a logging server. I'm pretty sure that we would have had a logging server years earlier if I had to convince quite a few decision-making people to go ahead with it anyway.

Use Cases and Deployment Scope

Graylog is currently implemented for use across the entire organization at each deployment that I have provisioned. However, Graylog is only referenced by myself, or Information Systems Staff. Graylog currently mainly addresses two separate needs for us. First, it allows the capture of NAT translations for DMCA related notifications for subscribers. Secondly, it addresses the need for an internal syslog server.

Likelihood to Recommend

If you just need a logging server that will most likely work, and won't break the bank. This is it, you can stop looking. Period.

Use Cases and Deployment Scope

We currently use Graylog as a log aggregator and some light weight SEIM. However, we haven't had the cycles to use the other features of it. Presently solves our centralized log collection problem.

Likelihood to Recommend

Graylog is suited for all environments. Its easy setup and use is great for small businesses. Its flexibility for configuration of ingested logs is excellent for medium to large scale, and its ingest capability is great for super-sized. One size fits all for Graylog. It's a great competitor to QRadar and Splunk, and even Alienvault USM/OSSIM

Use Cases and Deployment Scope

We use Graylog to collect messages from a variety of different systems like network switch and routers to wifi controllers. We use Graylog to group and create graphs to show specific information. We also use Graylog to send messages to us to alert of certain activities. Graylog is widely used in our office because it is cost-effective and the ability to be tweak for each team.

Likelihood to Recommend

Graylog can collect messages and group them, so if you want to get alerted when there is an abnormal amount of particular messages, Graylog can do that. Graylog can be used to analyze traffic, and if traffic over a certain level and is sustained for an amount of time, it can send the information of which mac addresses are causing the traffic influx.

Use Cases and Deployment Scope

Graylog is used to aggregate logs and SNMP traps from our network devices and Linux servers. We not only aggregate and store logs but extract values to make logging more searchable than using flat files with BASH utilities (grep, cut, awk, etc) to search. For our critical devices, we also use it to forward logs to a room in our private chat service via a custom integration.

Likelihood to Recommend

If you already have a basic understanding of Elasticsearch and/or MongoDB, Graylog will be a great fit when it comes to log aggregation. It will be a decent option even if you don't have any experience but have the time and willingness to roll up your sleeves that learning those tools will require. Graylog supports plugins to extend functionality for things like SNMP traps, telemetry collection, and solar flares. As is the case with most software with plugins, if the core functionality for which you are looking (i.e. not logging) is based on a plugin, Graylog probably isn't for you. The majority of the plugins in the marketplace are developed by third-parties looking to solve their specific use case so bug fixes and new features are not a given.

Use Cases and Deployment Scope

We use Graylog to view all of our system logs in one place. We use this software to back up our logs so in the event we need to review them we can go back as far as we need to. This software allows us to collect all our data easily.

Likelihood to Recommend

This is well suited for a small to medium sized environment where you are looking to collect all your system logs. In larger scale environments it would be trickier to pull this software off. The software can only handle a certain amount of logs per second, if you have lots of devices you should invest in a more premium product.