It’s extremely easy to use and set up, and the UI isn’t cluttered either. My point is that even if you’ve never seen Graylog’s interface before, you don’t have to hunt around to figure out how to use it. It was also straightforward to integrate with our log streams. We have massive log throughput across more than 50 different kinds of projects, each with its own logging style, and Graylog handles that just fine. The documentation is clear and easy to understand as well. Review collected by and hosted on G2.com.

The log stream page... If logs are multiple lines, or if it's a stack trace then the UI splits it into different lines and it's really hard to understand the log. I've looked but I couldn't find a way to somehow solve this. I also wish there was a way to enable color coding. Review collected by and hosted on G2.com.

Graylog 7.1 feels like a solid upgrade from a SOC engineering perspective. The biggest improvement for me is the collector experience,it’s now much easier to get logs flowing without the usual Sidecar-heavy setup overhead. That added flexibility speeds up onboarding for new systems and cuts down on configuration friction in day-to-day operations.

Overall, it comes across as more lightweight and more practical, and it seems better suited for fast-moving environments where you just want data in and visibility quickly.

Graylag has also been a great tool for investigations in my experience, especially when I’m digging through logs and tracing activity during analysis. I’m currently exploring the new collector’s beta features in the lab, and I’m excited to eventually test the upgrade in production environments as well. Review collected by and hosted on G2.com.

Graylog provides a strong and flexible platform for centralized log management and pipeline-based message processing. The overall stream and routing capabilities are powerful and well suited for SOC environments.

One area that could further enhance operational efficiency would be improved alerting and visibility around platform state and ingestion workflows. Notifications for stopped streams, pipeline processing failures, and Sidecar health issues would help reduce troubleshooting time and improve reliability during day-to-day operations.

In environments where rapid log ingestion and correlation are critical, proactive operational alerts would add significant value by helping teams identify configuration or workflow issues earlier, before they impact investigations or monitoring coverage. Review collected by and hosted on G2.com.

I use Graylog to monitor application logs and troubleshoot backend issues. I like that it keeps logs in one place, which saves me time and makes it easier to find errors. Searching and filtering logs is easy, and I can quickly find specific errors without digging through multiple log files. Review collected by and hosted on G2.com.

I found the initial setup a bit challenging, especially configuring log inputs and sources. The interface sometimes feels overwhelming, and a step-by-step wizard with clearer instructions would help. Review collected by and hosted on G2.com.

I like Graylog's user-friendly interface, which makes it easy to find everything I need, like search or filter functions, with each component fitting perfectly. I also appreciate its capability as a centralized solution for grouping different types of logs, such as applications on OKE clusters and microservices on EBM traces, while integrating various cloud logs from Oracle and Google. Its design is great, and it offers most of the functionalities we need for monitoring different log types and features for logging solutions. Review collected by and hosted on G2.com.

I think Graylog could improve by increasing the built-in integrations. Right now, we're using GitLab, but we're doing it in a legacy integration way. Having a direct integration with GitLab would be great. Also, having more sample integrations available directly within the application would be helpful. Review collected by and hosted on G2.com.

I like Graylog's problem-solving capabilities that make it easy to find errors and troubleshoot issues quickly. It helps find the root cause by bringing system logs into one place, reducing troubleshoot time, and maintaining system reliability. Review collected by and hosted on G2.com.

Graylog can sometimes be complex for beginners. Improving the documentation would really help make troubleshooting much simpler. Providing step-by-step tutorials using real-world examples and comprehensive troubleshooting guides would be particularly useful. Review collected by and hosted on G2.com.

I really like Graylog for several reasons. It is easy to set up and manage, which I really appreciate because it makes it quickly operational. The interface is simple and efficient, with filters that allow you to easily find the necessary logs. The ability to easily add new servers by configuring Graylog as the log destination is a plus, as the logs are immediately forwarded. I also appreciate the volume-based licensing which allows us to only pay for what we need, and it encourages us to optimize our logs if necessary to not exceed the limit. Finally, switching from Rsyslog to Graylog has been beneficial because Graylog is better in terms of display and management, and the initial installation was super easy and fast. Review collected by and hosted on G2.com.

In the future, perhaps integrate an AI agent that will fetch the desired logs for us with a simple prompt, like 'Fetch me the unauthorized access logs on server X'. Just that, an AI agent that helps the user display specific information like 'Show me the logs of denied access by all my servers that start with PRV'. Review collected by and hosted on G2.com.

Good UI and solid connectors. It’s easy to view the detection rules and parsers, and the self-serve demo experience is very straightforward thanks to the content that’s already set up. I also appreciate that there’s a Free/Open Source tier. Review collected by and hosted on G2.com.

The parameter configuration page feels a bit convoluted, with a lot of keywords to work through. Also, the Illuminate Windows packages only match certain messages, and it’s not easy to send Windows logs for Illuminate processing using anything other than Winlogbeat connectors. Review collected by and hosted on G2.com.

I like how Graylog helps us centralize and analyze logs from our applications. It makes troubleshooting easier, and we can quickly search and investigate problems, which reduces our downtime. Review collected by and hosted on G2.com.

The initial setup and configuration can be a bit complex, and the interface could be more intuitive. I think improving the UI and UX would help a lot. Review collected by and hosted on G2.com.

We use the Open version. It's full-featured even at that level. Review collected by and hosted on G2.com.

For beginners and people who don't use syslog servers every day, the concepts and procedures are a little unclear. Some tooltips and examples online would be helpful, and possibly open up new paid subscriptions. Review collected by and hosted on G2.com.

I like Graylog’s interface and the fact that AI is woven into it carefully. The clean UI stands out, and I value the AI assistant. The initial setup went on easily and was smooth. Review collected by and hosted on G2.com.

I think the design is a bit too 2010. The design system is mostly around blue, an old tech color, and a more vibrant, brighter, friendlier color would be more appealing. Review collected by and hosted on G2.com.