We've got you covered
Content Packs are collections of pre-built inputs, processing intelligence, display templates, and outputs (Alerts and Report). Content Packs were created to share configurations for popular types of devices, making the setup and configuration of these devices quick and consistent.
You can find Content Packs on the Graylog Marketplace, where they are kept up-to-date by all users. Once downloaded, you can install content packs via the web interface. Content packs have built-in inputs, extractors, and streams to ensure the logs are collected and identified correctly before the processing begins.
Content Packs allow for the parsing of logs into readable and searchable fields. This parsing allows for quick analysis of the logs by searching and analyzing key fields. Dashboards have pre-built queries for the analyst to show relevant data to the data set and present them in a logical format.