What's New in Graylog 6.0? | WED, MAY 22, 11am ET | Webinar >> ​

Feature

Search

Explore the power of data with Graylog's search functionality, tailored for agility and clarity. There are many features built into the search capabilities of Graylog.

Graylog Search

Create Search Criteria

The following features are different methods to create and manage your search criteria:

Filters: Hone in on the data that matters. Use filters to surface relevant results amidst the noise.

Parameters: Create searches with a template using single or multiple parameters. Parameters allow for detailed queries, targeting the exact information you need. They can be saved into Dashboards creating workflows for investigations.

Workflows: Streamline your investigative process. Workflows enable the chaining of searches, or parameters, building answers from your data.

Save & Sharing: Collaboration made simple. Save your search configurations and share them with teammates, ensuring consistency across investigations.

Dashboard Visualization: Transform data into visual stories. Create widgets and tabs that create a dynamic dashboard, making complex data understandable.

How It Works:

Graylog Feature Search

With Graylog’s user-friendly interface, searching is a breeze. A few clicks let you filter through data, customize parameters, and seamlessly connect multiple searches. The interface guides you through saving and sharing your searches, as well as setting up dashboards for ongoing monitoring. It’s about making complex data analysis accessible, allowing quick insights and informed decisions.

 

Searches are accomplished by creating your own text-based input queries or you can use fields and aggregation with the click of a button to visualize your data. Stringing queries together will enable you to narrow down even deeper into your data.

Learn More About Search in Graylog

Filters in Graylog enhance the search experience by allowing users to refine their results, helping them to focus on the data that truly matters and eliminating irrelevant information. Refined searches that are frequently executed provide one click into the information.

Parameters give users the ability to execute detailed queries. This means you can target specific information within your data, leading to a more efficient and precise search process. Parameters can be used within Event Definitions and Alerts to send Notifications on matches in your data queries.

Workflows allow users to chain searches together, creating a streamlined process for building a comprehensive narrative from the data. This is particularly useful for complex investigations that require multiple query steps. Workflows created from usernames, IP Addresses and hostnames are examples of how to drill into investigations using a workflow.

The Save & Sharing feature in Graylog enables users to keep their search configurations for future reference and share them with colleagues. This promotes collaborative analysis and ensures team members are aligned in their data investigation efforts. This also enables the escalation of incidents and investigations within the organization with relevant data.

Dashboard Visualizations allow users to create widgets and tabs that turn complex data sets into easily understandable visual stories. This makes it possible to grasp intricate data insights quickly and aids in making informed decisions based on those insights.

Graylog’s user interface is designed to be intuitive, guiding users through filtering data, setting search parameters, chaining searches, and visualizing results. The ease of use of the interface ensures that complex data analysis is accessible and that insights can be gleaned quickly. Searches can be created with visualizations and dashboards with the click of a button.

Graylog ensures efficient log processing, enabling organizations to gain valuable insights and enhance operational efficiency.