This Week In Log Managment
Welcome to This Week in Log Management!
Every week we get many great questions through support, the community, social media, and our weekly demo. On Fridays, I like to share the most common questions and answers, tips, insights, a closer look at Graylog, interviews, etc.
If you have any questions for me, drop them on Twitter, and I’ll do my best to fold them into upcoming Friday posts. Our handle is @graylog2.
How are Dashboards and Reports related?
Dashboards are one of Graylog's most popular features for a reason. You can visualize all of your log data in the form of graphs, charts, tables, etc., through Dashboard widgets. Reports are a reflection of your Dashboards. You export these visual representations of your log data into a nicely formatted PDF report that you can schedule and email at your convenience. If you don't want all of the data on your dashboard going out in a report, you can select only the widgets you want to include.
Combining these two is a great way to communicate different types of information to members of the company. Maybe your boss wants a report on data center performance. The compliance officer wants to know about suspicious logins. If you know what they want, you can create a report, set up a schedule, and Graylog will generate and send it for you.
What host can I use to send logs to Graylog?
Graylog supports many different hosts, including GELF (Graylog Enterprise feature), Syslog, BEATS, Nxlog, Plain Text, Netflow, etc. Choosing the right one depends on how you want to send logs. For example, both Winlogbeat and NXlog are very popular applications for sending logs from a Windows-based OS Event log. For the same OS, Sysmon is a good option for sending process creations, network connections, and file changes to the Windows Event Log. For Linux and macOS hosts, NXlog and Filebeat are solid choices for sending into Graylog. Syslog is a very common protocol setup to send logs in as well from many different devices.
For a step guide on how to send logs into Graylog, check out this webinar.
Does Graylog have a Cloud version?
Yes, we offer Graylog Cloud, which has all the Open and Enterprise-only features users rely on without the infrastructure and operational headaches. This means you can invest in your business and offload infrastructure, maintenance like patching and upgrades, redundancy, scaling, and support to Graylog. Also, with Graylog Cloud, you get the latest Enterprise features as soon as they are released.
Thanks for joining us, and Happy Logging With Graylog!