Graylog Features
Network Management (14)
-
Activity Monitoring
Documents the actions from endpoints within a network. Alerts users of incidents and abnormal activities and documents the access point.
-
Asset Management
Keeps records of each network asset and its activity. Discovers new assets accessing the network.
-
Log Management
Provides security information and stores the data in a secure repository for reference.
Network Monitoring
Tracks and makes accessible data on the health of servers and other network components.
Server Monitoring
Continuously scan servers on a designated network to monitor health and search for any irregularities or failures
File Integrity Monitoring
Validating the integrity of an operating system, application, and files by monitoring for probable changes, tempering, or fraud.
Real-Time Monitoring
Active monitoring of systems, applications, or networks
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Endpoint Management
Track status, assign actions, and control access to systems for devices within the organization
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Incident Management
Manage and track all disruptions and incidents
Vulnerability Management
Detect (and block) vulnerabilities and threats in your applications based on vulnerability information
Policy Management
Create, manage, and track policies and procedures within an organization
Event Logs
A chronological record of actions or occurrences within a network, software, or process
Incident Management (4)
-
Event Management
Alerts users of incidents and allows users to intervene manually or triggers an automated response.
-
Automated Response
Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
-
Incident Reporting
Documents cases of abnormal activity and compromised systems.
Real-Time Reporting
Active reporting of data and metrics
Security Intelligence (5)
-
Threat Intelligence
Stores information related to common threats and how to resolve them once incidents occur.
-
Vulnerability Assessment
Analyzes your existing network and IT infrastructure to outline access points that can be easily compromised.
-
Behavioral Analytics
Track and analyse user behavior within a system or network
-
Data Examination
Allows users to search databases and incident logs to gain insights on vulnerabilities and incidents.
Real-Time Data
Receive data and information in real time
Visibility (3)
Dashboards and Visualizations
Presents information and analytics in a digestible, intuitive, and visually appealing way.
Alerts and Notifications
Clearly notifies users with relevant information and anomalies in a timely manner.
Reporting
Creates reports outlining log activity and relevant metrics.
Monitoring and Management (3)
Automation
Automatically allocates resources to address log anomalies.
Performance Baseline
Sets a standard performance baseline by which to compare log activity.
Real-Time Monitoring
Constantly monitors logs to detect anomalies in real time.
Data Preparation (4)
-
Data Sources
Automatically collect logs from all your services, applications, and platforms
Indexing
Automate the indexing of machine data that's critical to your operations
Automated Tagging
See log data in context with automated tagging and correlation
Data Blending
Mix and match data from apps, hosts, containers, services, networks, and more
Analysis (7)
Track Trends
Allows user to track log trends.
Detect Anomalies
Identify and predict anomalies in real-time with outlier detection and uncover root-causes
Metric and Event Data
Analyze both metric and event data on the same platform regardless of source or structure
-
Search
Search your logs for troubleshooting and open-ended exploration of your data
-
Alerts
Create alerts based on search patterns, thresholds for specific log metrics, or other conditions
-
Live Tail
See your data, in real time, streaming into the system from multiple data sources
Real-Time Data
Receive data and information in real time
Visualization (5)
Dashboards
Visualize log data on dashboards
Data Discovery
Drill down and explore data to discover new insights
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Customizable Dashboard
Alter the layout and content of dashboards
Agentic AI - Security Information and Event Management (SIEM) (3)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Multi-step Planning
Ability to break down and plan multi-step processes
Decision Making
Makes informed choices based on available data and objectives
Agentic AI - Log Analysis (5)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Multi-step Planning
Ability to break down and plan multi-step processes
Natural Language Interaction
Engages in human-like conversation for task delegation
Decision Making
Makes informed choices based on available data and objectives
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Agentic AI - Log Monitoring (4)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Multi-step Planning
Ability to break down and plan multi-step processes
Natural Language Interaction
Engages in human-like conversation for task delegation
Decision Making
Makes informed choices based on available data and objectives
Additional Functionality (72)
Continuous Monitoring
Conduct tracking and assessment of application and device behavior without breaks or interruptions
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Real-Time Analytics
Analyze and gain insights into data in real-time
Issue Tracking
Record and follow the progress of every issue
Anomaly Detection
Automatically identify unusual behavior
Visual Analytics
Interact with data visualization elements, such as charts and graphs, to drill down into data
Data Visualization
Graphical representation of data
Monitoring
Observe and track the demand, usage, progress or quality of a system, product, or user
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Audit Management
Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws
Correlation Analysis
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Reporting & Statistics
Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
Search/Filter
Search and filter data across systems to locate required information by entering keywords or certain criteria
Data Import/Export
Import and export data to and from software applications
Data Classification
Grouping log entries based on similar attributes.
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Pattern Detection and Recognition
Filtering incoming messages/alerts and detecting patterns to spot anomalies.
Analytics
Tools for the systematic analysis of various types of data or statistics
Activity Tracking
Track and document all activities across devices, networks, and other systems
Event Tracking
Log Collection
Collects and aggregates data from various systems within the IT environment
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Log Analysis
Analyzing computer-generated records called logs to identify the root cause of errors, bugs, security threats, or other risks
Event Logs
A chronological record of actions or occurrences within a network, software, or process
Data Analysis Tools
Analyze survey results via statistical testing or crosstabs directly within the software
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
Predictive Analytics
Predict future data based on historical data sets
Performance Metrics
A set of indicators that tracks the performance of networks, applications, systems, teams, etc.
Secure Data Storage
Securely stores data to prevent data loss or breaches
Dashboard Creation
Creation and customization of dashboards
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Alerts/Escalation
System alerts about the need to escalate an issue or request
Remediation Management
Identify and orchestrate execution of actions needed to restore systems to optimal conditions
Compliance Tracking
Track and report regulatory data to either internal management or external stakeholders
Single Sign On
Allow users to access multiple services after entering their login credentials once
Prioritization
Arrange tasks based on the level of priority or urgency
Uptime Reporting
Track the availability time for a designated network or website over a given period of time
Log Rotation
Automatically renames, resizes/compresses, archives or deletes old or oversized log files
Real-Time Notifications
Notifications that are delivered to users as soon as an event occurs
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Server Logs
Log files automatically created for all activities performed by servers, such as a history of web page requests
Incident Management
Manage and track all disruptions and incidents
Role-Based Permissions
Set & manage permission levels based on user roles and restrict access to only authorized individuals
PCI Compliance
Store, process, and transmit cardholder data in compliance with the Payment Card Industry Data Security Standard (PCI DSS)
Charting
Manage patient documentation describing all clinical interactions, diagnoses, procedures, medications, etc.
Log Parsing
Splits and groups log data automatically or according to user-defined rules
Archiving & Retention
Moving and separately storing data that is not actively used or continuous storage of data for compliance purposes
Server Monitoring
Continuously scan servers on a designated network to monitor health and search for any irregularities or failures
API
Application programming interface that allows for integration with other systems/databases
Diagnostic Tools
Access client's system information, including hardware and software configuration, to perform diagnostics
Customizable Reports
Alter the layout and content of reports
Real-Time Reporting
Active reporting of data and metrics
Policy Management
Create, manage, and track policies and procedures within an organization
Issue Management
Identify and respond to unexpected problems or failures (ie. "negative events")
Vulnerability Scanning
Discover patch statuses and vulnerabilities
Real-Time Notifications
Notifications that are delivered to users as soon as an event occurs
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Application Security
Identify and respond to security threats to developed applications
Risk Analysis
Analyze potential risks across the organization
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Data Import/Export
Import and export data to and from software applications
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Prioritization
Arrange tasks based on the level of priority or urgency
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
Search/Filter
Search and filter data across systems to locate required information by entering keywords or certain criteria
Compliance Tracking
Track and report regulatory data to either internal management or external stakeholders
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
API
Application programming interface that allows for integration with other systems/databases
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Data Visualization
Graphical representation of data


