Graylog Illuminate is an Enterprise feature that offers visualizations that meet the needs of our customers out-of-the-box. Illuminate’s pre-configured content is designed with common cybersecurity and log management questions in mind to give you the fast start you need for success. Sometimes we’ve even anticipated questions that you didn’t know to ask, providing you deeper visibility so you can see what’s going on. The result is that you’re better equipped to monitor and manage challenges that can range from unlocking passwords to hunting for that bad actor that breached your network.
Start fast with pre-built content
Authentication
Easily correlate authentication data across different types of data sources.
Gain visibility into who is trying to log into what throughout your IT environment.
Networks
Monitor and analyze the data, identify any malicious activity occurring within your network.
Isolate the source of the activity, and quickly respond to the threats.
Applications
Eliminate the manual set up necessary to detect, monitor, and analyze application issues across your IT infrastructure.
Visualize all of your application data in pre-built dashboards and drill-down for details and deeper insights.
Help me see my data
Correlated Alerts
Receive alerts via email, text, Slack, and more. Update alert criteria based on a dynamic list in a lookup table.
Is Illuminate available with Graylog Open Source? No, Illuminate is only available with Graylog Enterprise.
How do I install Illuminate? Graylog comes with a UI for installing Illuminate core, processing, and pipelines. This automated installation process takes care of everything under the covers -- i.e., it updates Elasticsearch templates, installs new processing pipelines and rules, installs new CSV lookups, and syncs the Illuminate installation across all nodes in your cluster.
