Graylog

Graylog pulls logs from across your stack into one place to collect, store, search, and analyze them, so lean teams get a central view instead of checking systems separately. It ingests data over GELF, Syslog, AMQP, and Kafka, and turns raw events into searches, dashboards, and alerts.

Beyond plain log management, Graylog positions itself for security work: it markets SIEM, anomaly detection, and API protection alongside its core log pipeline. That makes it a fit for both operational troubleshooting and threat investigation on the same data.

The open-source server (graylog2-server) is source-available under the Server Side Public License (SSPL), not a standard OSI-approved license. It is self-hosted, with the server written in Java and a TypeScript web interface; source lives on GitHub and the company behind it is Graylog Inc.