Graylog
Log Management Platform
Graylog is a powerful log management platform that centralizes logs from all your servers and applications for easy searching, analysis, and alerting.
Key Features
- Log aggregation and parsing
- Full-text search
- Real-time alerting
- Dashboard creation
- Stream processing
- Archive and compliance
Why I Use It
I originally set Graylog up at work as the first syslog server the organization had ever implemented — partly to centralize firewall logs from a Cisco Meraki that was dropping entries constantly, and partly because having a real log management platform changes how you approach troubleshooting entirely. Once logs from OPNsense and other systems started flowing in, I could actually search and correlate events instead of grepping through files. One of the standout features is the GeoIP integration — after pulling in the MaxMind city and ASN databases (free account), you can build dashboards that show geographically where connections are coming from and where your network is reaching out to, which is genuinely useful for spotting anomalies. I wrote a full walkthrough of the setup if you want to dig into the details: Setting Up Graylog.
Links: GitHub · Official Site