Graylog Reviews

AC N

Head of Infrastructure

Aug 27 2019

Captures our financial logs and preserves them and it covers many environments

What is most valuable?

What I like most about this solution, is that it caches the log. I also like it's filtration because we have various layers of data that needs to be captured - from flat filing to Windows servers, Linux-based servers and the like. I like… more»

How has it helped my organization?

Graylog captures our financial logs and preserves them, mainly for any audit that may come up. The compliance is very good.

What needs improvement?

I would like to see a date and time in the Graylog Grok patterns so that I can save time when searching for a log. I like how the streams and the search query work, but adding a date and time will allow me to pull out a log in a… more»

What's my experience with pricing, setup cost, and licensing?

I use the free version of Graylog.

What other advice do I have?

In the next version I would perhaps like to see less overlapping in in the interface. Some users feel that it is still very rigid and boxy. Pretty old school. So a more user-friendly interface with less overlapping in the structures would… more»

See Entire Graylog Review (537 Words) »

JasonCrow

Senior Architect at a tech vendor with 51-200 employees

Mar 04 2018

Enables us to set up streams and error/anomaly searches across hundreds of containers

What is most valuable?

* Searching errors * Alerting through Slack and OpsGenie using their plugins. We run a containerized microservices environment. Being able to set up streams and search for errors and anomalies across… more»

What needs improvement?

Elasticsearch recommendations for tuning could be better. Graylog doesn't have direct support for running the system inside of Kubernetes, so it can be challenging to fill in the gaps and set up… more»

What's my experience with pricing, setup cost, and licensing?

We use the free version.

Which solution did I use previously and why did I switch?

Splunk, Logstash, and Elasticsearch.

What other advice do I have?

Make sure your Elasticsearch cluster is sized right, memory-wise.

Which other solutions did I evaluate?

Splunk, Logstash, and Elasticsearch.

See Entire Graylog Review (406 Words) »

Download Free Report

Find out what your peers are saying about Graylog, Elastic, Splunk and others in Log Management. Updated: January 2020.

Download now

391,932 professionals have used our research since 2012.

John Paul Dienst

Technology Consultant

Mar 08 2018

Real-time UDP/GELF logging and full text-based searching

What is most valuable?

Real-time UDP/GELF logging and full text-based searching. Since UDP is a stateless, connectionless protocol, it simplifies error handling for the log sender/producer in… more»

How has it helped my organization?

Logs were previously stored in various database tables. Log consumers were required to write SQL for retrieval, then correlate/join disparate sources by hand. Since most… more»

What needs improvement?

* Backup and restore functionally for migrating instances. * Dashboard and search analytics (i.e., more complex visualizations and the ability to execute custom… more»

What's my experience with pricing, setup cost, and licensing?

You get a lot out-of-the-box with the non-enterprise version, so give it a try first.

Which solution did I use previously and why did I switch?

No previous solution.

What other advice do I have?

Thoroughly read the Graylog documentation and consider Enterprise support if you have atypical needs or setup requirements.

Which other solutions did I evaluate?

All the other solutions were in-house proposals.

1 comment

See Entire Graylog Review (382 Words) »

IT Security Consultant at a tech services company with 10,001+ employees

Feb 04 2018

Scales smoothly, but needs improvement in dashboards and parsing

What is most valuable?

The most valuable part is an open source. The build is stable and requires little maintenance, even compared to some extremely expensive products.

How has it helped my organization?

It is used as a log manager/SIEM. It provides visibility into the infrastructure and security related events.

What needs improvement?

There are places which could be improved: * Stream alerts * Dashboards * Parsing. Some places were already improved in 2.4 with the threat intelligence add-on.