Graylog2/graylog2-server

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

8115 stars · 1123 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Graylog is a free and open log management platform for collecting, storing, searching, and analyzing log data from across IT environments, with dashboards, alerting, and pipeline-based log routing. It also provides SIEM capabilities such as threat detection with Sigma rules, anomaly detection, and investigations.

Use cases

• centralize logs from servers and applications
• search and analyze log data in real time
• set up alerts on log events and anomalies
• build a self-hosted SIEM for threat detection
• collect syslog and GELF messages
• route and enrich logs with pipelines
• create dashboards and reports from log data

When to choose

• you need centralized log management with powerful search and dashboards
• you want an open-source SIEM with alerting and Sigma rule support
• you need to ingest logs via syslog, GELF, Kafka, or AMQP at scale
• you prefer self-hosting your log platform on your own infrastructure

When to avoid

• you need a permissive open-source license - Graylog uses SSPL, not OSI-approved
• you only need lightweight local log viewing without a server stack
• you want a fully managed cloud logging service without operations
• you need enterprise features like certain AI capabilities that require paid Graylog editions

Facets

service · maturity stable

logging search-engine alerting monitoring analytics security monitoring security analytics self-hosted self-hosted jvm log-management siem syslog gelf log-analysis log-collector kafka amqp threat-detection sspl dashboard devops linux docker web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Graylog2/graylog2-server")