Graylog2 is an open source log management solution implementation that stores your logs in ElasticSearch, an open Source, distributed, RESTful, search engine built on top of Apache Lucene.
It consists of a server written in Java that accepts your syslog messages via TCP or UDP and stores it in the database. The second part is a Ruby on Rails web interface that allows you to view the log messages.
The web interface uses Ruby On Rails, the server is written in Java.
Graylog2 has been in development since May 2010.
Key Features
- Web interface:
- Search and filter data.
- Streams – saved searches that allow you to quickly access an overview that is pre-filtered.
- Get alerts when the amount of new log messages reaches a defined maximum.
- Create streams for every API consumer and quickly filter errors of certain consumers.
- Send a log message for every activity a user performs in your application.
- Accepts standard syslog via TCP/UDP and GELF via UDP.
- Send in both formats via AMQP (AMQP Docs).
- Graylog Extended Log Format (GELF):
- Libraries and log appenders for Ruby, PHP, Python, Perl/Log4Perl, Java/Log4j (gelf4j, gelfj), Log4r, .NET/log4net, node.js, NLog, Logback plugin, resque, systemd, and Rack.
- Handles hundreds of millions of log events and terabytes of data.
Website: www.graylog.org
Support: GitHub Code Repository
Developer: Lennart Koopmann and contributors
License: Server Side Public License (SSPL)

Graylog2 is written in Java. Learn Java with our recommended free books and free tutorials.
Related Software
| Log Analyzers | |
|---|---|
| Kibana | Browser based interface for logstash and ElasticSearch |
| logstash | Log processing, search, and analytics |
| OpenObserve | Cloud-native observability platform |
| GoAccess | Real-time web log analyzer and interactive viewer |
| Fluentd | Data collector for unified logging layer |
| Loki | Horizontally-scalable, highly-available, multi-tenant log aggregation system |
| Graylog2 | Log management solution implementation storing logs in ElasticSearch |
| Graphite | Enterprise scalable realtime graphing |
| SigNoz | Monitor your applications and troubleshoot problems |
| Apache Flume | Delivers data from applications to Apache Hadoop's HDFS |
| OpenTSDB | Scalable, distributed Time Series Database |
| VictoriaLogs | High-performance log database designed to ingest, store, and query log data |
| Scribe | Server for aggregating log data that is streamed in real time from clients |
| LogoRRR | Cross-platform log analysis tool |
| Chukwa | Hadoop sub-project devoted to large-scale log collection and analysis |
Read our verdict in the software roundup.
Explore our comprehensive directory of recommended free and open source software. Our carefully curated collection spans every major software category.This directory is part of our ongoing series of informative articles for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more. Discovered a useful open source Linux program that we haven’t covered yet? Let us know by completing this form. |

