6smarketersSoftware
Home/Developer & IT/Observability & Log Management/Graylog

Graylog

Observability & Log Management

Visit websiteCompare
★★★★☆ 4.4 / 5 on G2 · 4.5 on Capterra (122 G2 reviews)
4.4 / 5
G2 rating, 122 reviews [source]
Open source
+ enterprise [source]
Free
Open edition [source]
Logs + SIEM
Centralised [source]

Quick facts

CategoryOpen source log management
VendorGraylog
Starts atOpen source free; enterprise quote
Best forOpen source log management
DeploymentSelf hosted and cloud
Free planYes, open edition
IntegrationsInputs, OpenTelemetry, security
G2 rating4.4 / 5
Capterra rating4.5 / 5

What is Graylog?

Graylog is an open source centred log management platform, self hosted or cloud, strong for centralised logging and security (SIEM), popular with teams wanting capable, affordable log management. It centralises logs from across an environment, with collection, parsing, storage, powerful search, dashboards and alerting, and extends to security with Graylog Security (SIEM), available as a free, source available edition you self host or as commercial Graylog Operations and Security editions and cloud. Known for being a capable, cost effective log management platform, especially versus expensive commercial tools, Graylog suits teams that want strong centralised logging and security analytics without high cost. For open source log management, Graylog is a leading choice.

Graylog's distinction is capable, affordable, open source centred log management with a security focus. It gives teams centralised logging, search, dashboards and alerting, plus a SIEM for security, with a free self hosted edition and reasonably priced commercial options, so they get strong log management and security analytics without the cost of tools like Splunk. That value, openness and logging and security focus set it apart.

Graylog at a glanceGraylog is an open source centred log management platform strong for logging and security [Graylog]. It holds a 4.4 out of 5 rating across 122 reviews on G2 and 4.5 on Capterra, popular for capable, affordable log management.

Who Graylog is best for

Graylog is best for teams that want capable, affordable centralised log management and often security analytics (SIEM), with the option of a free self hosted edition, especially those cost conscious or wanting control. It suits value focused logging and security teams. It is a weaker fit for teams wanting a fully managed all in one commercial observability platform, where Datadog fits, the leading open dashboards specifically, where Grafana fits, or the deepest enterprise analytics, where Splunk fits.

Key features

The core strengths are centralised log collection, parsing, storage, powerful search, dashboards and alerting, plus security analytics (Graylog Security SIEM), available free self hosted (open edition) or as commercial Operations and Security editions and cloud. Graylog offers many inputs, OpenTelemetry support, and threat detection content. Its capable, affordable log management and security focus are its defining advantages.

Graylog pricing

Graylog offers a free, source available open edition you self host (paying infrastructure), and commercial Graylog Operations and Graylog Security editions and cloud, priced by data volume and quoted, generally more affordable than high end commercial log tools. So teams can self host free or pay for commercial features and support. Costs scale with data. Confirm details via the Graylog pricing page.

Integrations and ecosystem

Graylog supports many log inputs and sources, integrations with security and IT tools, OpenTelemetry, and content packs and threat detection rules, with an active community. Its broad inputs and security content, plus open source community, which let teams centralise and analyse logs and detect threats affordably, support its logging and security positioning.

Graylog and value log management

Capable, affordable log management with security is the signature strength: Graylog centralises logs with powerful search, dashboards and alerting, and adds a SIEM, with a free self hosted edition and reasonably priced commercial options, so teams get strong logging and security analytics without high cost. For value focused teams, this is the main reason to choose Graylog.

Ease of use and support

Graylog is well rated for capable, affordable log management and ease relative to some rivals, with community and commercial support, though self hosting takes operations effort. Its G2 reviews praise value, centralised logging and security use, with self hosting effort and scale the main considerations.

Is Graylog worth it?

For teams that want capable, affordable centralised log management and security analytics, with a free self hosted option, Graylog is a strong, well rated choice. The main caution is self hosting effort and that it is logging and security focused rather than full APM observability, so teams wanting a managed all in one platform may prefer Datadog, the leading dashboards Grafana, and deepest analytics Splunk, but for open source log management Graylog leads.

Pricing

Open (source available)

$0
self hosted
  • Centralised logging
  • Search and dashboards
  • Your infrastructure

Graylog Operations

Custom
quote
  • Advanced features
  • Support
  • Scale

Graylog Security

Custom
quote
  • SIEM
  • Threat detection
  • Security content

Pros and cons

Pros

  • Capable, affordable log management
  • Free self hosted open edition
  • Powerful search and dashboards
  • Security analytics (SIEM)
  • Good value versus Splunk

Cons

  • Self hosting takes operations effort
  • Not full APM observability
  • Smaller ecosystem than leaders
  • Scale needs planning

Graylog alternatives

These observability & log management tools come up most often against Graylog.

Graylog FAQ

What is Graylog used for?
Graylog is used for centralised log management: collecting, parsing, storing, searching, visualising and alerting on logs from across an environment, plus security analytics (Graylog Security SIEM), self hosted free or via commercial editions and cloud.
How much does Graylog cost?
Graylog offers a free, source available open edition you self host, and commercial Graylog Operations and Security editions and cloud priced by data volume and quoted, generally more affordable than high end commercial log tools. See the Graylog pricing page.
Is Graylog free?
Yes. Graylog offers a free, source available open edition you can self host, paying only infrastructure, with commercial Operations and Security editions and cloud for advanced features and support, making it a cost effective log management option.
Graylog vs Splunk, which is better?
Graylog is a capable, affordable open source centred log management and SIEM platform, while Splunk is the enterprise machine data analytics standard but costly. Graylog suits value focused logging and security; Splunk suits enterprise analytics power at higher cost.
Does Graylog do security (SIEM)?
Yes. Graylog Security provides SIEM and threat detection on the same log platform, so teams can use Graylog for both centralised log management and security analytics over their log data, affordably.
Is Graylog hard to run?
Graylog's open edition is self hosted, so it takes operations effort to deploy and scale, though it is well regarded for being capable and relatively approachable, with commercial editions and cloud reducing the burden for those who prefer managed options.

External links