# Graylog Add-ons **URL:** https://community.graylog.org/c/addons/10.md [Latest](https://community.graylog.org/latest.md) · [Categories](https://community.graylog.org/categories.md) · [Tags](https://community.graylog.org/tags.md) --- ## [About the Graylog Add-ons category](https://community.graylog.org/t/about-the-graylog-add-ons-category/30)
**Author:** [@jan](https://community.graylog.org/u/jan)\ **Replies:** 2\ **Last updated:** [February 17, 2017, 7:53pm UTC](https://community.graylog.org/t/about-the-graylog-add-ons-category/30 "2017-02-17T19:53:47Z")
Use this category for all things related to add-ons from the Graylog Marketplace such as installation and usage of plugins, content packs, etc. --- ## [Custom plugin for greylog open](https://community.graylog.org/t/custom-plugin-for-greylog-open/37093)
**Author:** [@pm\_cds](https://community.graylog.org/u/pm_cds)\ **Replies:** 0\ **Last updated:** [March 17, 2026, 1:07pm UTC](https://community.graylog.org/t/custom-plugin-for-greylog-open/37093 "2026-03-17T13:07:09Z")
Hi everyone, I’ve been exploring custom plugin development in Graylog and went through the official documentation: https://go2docs.graylog.org/current/what\_more\_can\_graylog\_do\_for\_me/plugins.html?tocpath=Set%20Up%20Gra… --- ## [Alternative Microsoft 365 Input add-on for Graylog Open?](https://community.graylog.org/t/alternative-microsoft-365-input-add-on-for-graylog-open/36698)
**Author:** [@m.toso](https://community.graylog.org/u/m.toso)\ **Replies:** 0\ **Last updated:** [December 4, 2025, 7:36am UTC](https://community.graylog.org/t/alternative-microsoft-365-input-add-on-for-graylog-open/36698 "2025-12-04T07:36:25Z")
Hello everyone, I’ve learned about the discontinuation of the SMB license. I appreciate at least that we were informed a year in advance. It’s a pity. We would have been willing to pay, but not the Enterprise price. The… --- ## [Quick™ Updated {{Official}} List of Frontier™ Airlines CUSTOMER© SERVICE℗ (24/7 Live Person ) Numbers: A Complete Guide](https://community.graylog.org/t/quick-updated-official-list-of-frontier-airlines-customer-service-24-7-live-person-numbers-a-complete-guide/36565)
**Author:** [@posine7490](https://community.graylog.org/u/posine7490)\ **Replies:** 0\ **Last updated:** [November 6, 2025, 9:12pm UTC](https://community.graylog.org/t/quick-updated-official-list-of-frontier-airlines-customer-service-24-7-live-person-numbers-a-complete-guide/36565 "2025-11-06T21:12:50Z")
how to eat mango in 5 minutnes --- ## [Graylog Pipeline Rule GROK Pattern problems](https://community.graylog.org/t/graylog-pipeline-rule-grok-pattern-problems/36112)
**Author:** [@jvm](https://community.graylog.org/u/jvm)\ **Replies:** 1\ **Last updated:** [July 29, 2025, 8:05pm UTC](https://community.graylog.org/t/graylog-pipeline-rule-grok-pattern-problems/36112 "2025-07-29T20:05:28Z")
Hello everyone, I am new to GROK patterns, and I am currently struggling with implementing a pipeline rule and using GROK to extract data to fields. I am using a grok debugger, and in the debugger my GROK pattern works… --- ## [Filter logs by logon type](https://community.graylog.org/t/filter-logs-by-logon-type/35779)
**Author:** [@Ev4ld](https://community.graylog.org/u/Ev4ld)\ **Replies:** 0\ **Last updated:** [June 3, 2025, 1:41pm UTC](https://community.graylog.org/t/filter-logs-by-logon-type/35779 "2025-06-03T13:41:24Z")
I’m trying to filer out logs by logon type where I don’t want to receive logons with LogonType 5 and 3 with: \ Module im\_msvistalog \ \ \ … --- ## [Ubiquiti UniFi Content Pack Graylog Docker](https://community.graylog.org/t/ubiquiti-unifi-content-pack-graylog-docker/35643)
**Author:** [@paulrobinsontkd](https://community.graylog.org/u/paulrobinsontkd)\ **Replies:** 0\ **Last updated:** [May 19, 2025, 10:09am UTC](https://community.graylog.org/t/ubiquiti-unifi-content-pack-graylog-docker/35643 "2025-05-19T10:09:36Z")
I’m currenly using Graylog Open 6.2 for ingestion of Unifi Firewall logs from my UDM Pro in a home lab setting. I would like to try the Ubiquiti UniFi Content Pack but it mentions that you need Graylog Enterprise. I un… --- ## [How to install sidecar on other drive than c](https://community.graylog.org/t/how-to-install-sidecar-on-other-drive-than-c/35315)
**Author:** [@schurd](https://community.graylog.org/u/schurd)\ **Replies:** 0\ **Last updated:** [March 26, 2025, 3:00pm UTC](https://community.graylog.org/t/how-to-install-sidecar-on-other-drive-than-c/35315 "2025-03-26T15:00:55Z")
Hello, we want to install the Graylog Sidecar (1.5.0) not on the drive c: We want to install on x: How can this be done? Regards, Dietmar Schurr --- ## [Graylog 6.1.7 - Output to file](https://community.graylog.org/t/graylog-6-1-7-output-to-file/35136)
**Author:** [@tonystra](https://community.graylog.org/u/tonystra)\ **Replies:** 3\ **Last updated:** [March 18, 2025, 10:49am UTC](https://community.graylog.org/t/graylog-6-1-7-output-to-file/35136 "2025-03-18T10:49:27Z")
Hi all, in the past (till graylog 4.1.5) I successfully used the following plugin: GitHub - rswestmoreland/graylog-delimited-file-output-plugin: An output plugin for Graylog2, providing the ability to export messages t… --- ## [Graylog netflow dashboard](https://community.graylog.org/t/graylog-netflow-dashboard/34256)
**Author:** [@ahsan](https://community.graylog.org/u/ahsan)\ **Replies:** 0\ **Last updated:** [November 22, 2024, 1:37pm UTC](https://community.graylog.org/t/graylog-netflow-dashboard/34256 "2024-11-22T13:37:39Z")
Hi, I have configured netflow input and i am getting netflow v5 input packets. but where do i visualize it ? is there any dashboard where i can see it ? --- ## [Netflow listening only on udp6 2055 and not receiving netflow](https://community.graylog.org/t/netflow-listening-only-on-udp6-2055-and-not-receiving-netflow/34246)
**Author:** [@ahsan](https://community.graylog.org/u/ahsan)\ **Replies:** 3\ **Last updated:** [November 22, 2024, 8:55am UTC](https://community.graylog.org/t/netflow-listening-only-on-udp6-2055-and-not-receiving-netflow/34246 "2024-11-22T08:55:10Z")
Hi I have just installed graylog and was exploring its netflow feature. i have added input for netflow but its not shoing any data. when i checked in the linux shell the output says its listening on port 2055 but seems … --- ## [Assistance Required for Syslog UDP Input Binding Issue in Graylog 6](https://community.graylog.org/t/assistance-required-for-syslog-udp-input-binding-issue-in-graylog-6/33322)
**Author:** [@benashour](https://community.graylog.org/u/benashour)\ **Replies:** 1\ **Last updated:** [August 26, 2024, 9:28am UTC](https://community.graylog.org/t/assistance-required-for-syslog-udp-input-binding-issue-in-graylog-6/33322 "2024-08-26T09:28:32Z")
am experiencing an issue with Graylog 6 where I am unable to bind a Syslog UDP input to a specific IP address and port. Here are the details: System and Graylog Version: Graylog Version: 6.x Operating System: AlmaLinu… --- ## [Alternatives to Graylogs Threat Intel Plugin](https://community.graylog.org/t/alternatives-to-graylogs-threat-intel-plugin/33314)
**Author:** [@EyImWawkinHeah](https://community.graylog.org/u/EyImWawkinHeah)\ **Replies:** 0\ **Last updated:** [August 23, 2024, 6:01pm UTC](https://community.graylog.org/t/alternatives-to-graylogs-threat-intel-plugin/33314 "2024-08-23T18:01:40Z")
Hello all, I have been working on getting the threat intel plugins provided by GL to work in my environment. For the most part the IP address lookups are working great but when I tried to use the dns lookup function, it… --- ## [Plugin that adds dropdown menus](https://community.graylog.org/t/plugin-that-adds-dropdown-menus/33174)
**Author:** [@TheWalrus](https://community.graylog.org/u/TheWalrus)\ **Replies:** 0\ **Last updated:** [August 1, 2024, 2:57pm UTC](https://community.graylog.org/t/plugin-that-adds-dropdown-menus/33174 "2024-08-01T14:57:32Z")
Hi! I was wondering if anyone knows of a Graylog plugin that allows the creation of dropdown menus in dashboards. Basically, I would like to have a message table and be able to filter the logs based on an option picked f… --- ## [Graylog Aggregate Rule not triggering Alert](https://community.graylog.org/t/graylog-aggregate-rule-not-triggering-alert/33039)
**Author:** [@rfrost](https://community.graylog.org/u/rfrost)\ **Replies:** 0\ **Last updated:** [July 19, 2024, 10:37am UTC](https://community.graylog.org/t/graylog-aggregate-rule-not-triggering-alert/33039 "2024-07-19T10:37:16Z")
Hi Graylog Community, We are running Graylog V 2.4 (We know its out of support officially) When configuring a new Aggregate rule we are unable to get any of the Triggered Aggregates to appear as Alerts and as such not … --- ## [Enriching Process Information](https://community.graylog.org/t/enriching-process-information/32999)
**Author:** [@AlexTratisky](https://community.graylog.org/u/AlexTratisky)\ **Replies:** 1\ **Last updated:** [July 16, 2024, 7:37pm UTC](https://community.graylog.org/t/enriching-process-information/32999 "2024-07-16T19:37:50Z")
Hello, I would like to enrich processes fields in my graylog events with some additional information. for example, when graylog spots a process.exe query that online to see what is that process.exe used for (get its des… --- ## [Trying to do a threshold line, and linking dashboards with data link](https://community.graylog.org/t/trying-to-do-a-threshold-line-and-linking-dashboards-with-data-link/32960)
**Author:** [@danielrodr](https://community.graylog.org/u/danielrodr)\ **Replies:** 0\ **Last updated:** [July 12, 2024, 1:18pm UTC](https://community.graylog.org/t/trying-to-do-a-threshold-line-and-linking-dashboards-with-data-link/32960 "2024-07-12T13:18:05Z")
Hi Community, I’m trying to do 2 things: 1 - Add a static threshold line defined by me, on a line graphic, with the color of red or yellow. 2 - I have a timeline graphic grouping per exception, and I want that the use… --- ## [Geolocation in Graylog](https://community.graylog.org/t/geolocation-in-graylog/32771)
**Author:** [@milos](https://community.graylog.org/u/milos)\ **Replies:** 3\ **Last updated:** [June 21, 2024, 7:04am UTC](https://community.graylog.org/t/geolocation-in-graylog/32771 "2024-06-21T07:04:09Z")
Hi, According to Geolocation, I’m trying to enable geolocation in Graylog. In the menu System \> Configurations and select the Message Processors, no button “Edit configuration” is displayed. We use the open version o… --- ## ['Content Pack selection' results in empty 'Entity List' during content pack creation](https://community.graylog.org/t/content-pack-selection-results-in-empty-entity-list-during-content-pack-creation/31956)
**Author:** [@Simon1](https://community.graylog.org/u/Simon1)\ **Replies:** 1\ **Last updated:** [April 8, 2024, 7:17am UTC](https://community.graylog.org/t/content-pack-selection-results-in-empty-entity-list-during-content-pack-creation/31956 "2024-04-08T07:17:50Z")
Issue: When making a content pack, selected entities in the “Content Selection”-step don’t (always) transfer to the “Prameters”-step which, subsequently, results in an empty content pack Use Case: I’m hosting a graylog … --- ## [Plugin modify input](https://community.graylog.org/t/plugin-modify-input/31984)
**Author:** [@dblakaj](https://community.graylog.org/u/dblakaj)\ **Replies:** 1\ **Last updated:** [April 2, 2024, 4:36am UTC](https://community.graylog.org/t/plugin-modify-input/31984 "2024-04-02T04:36:11Z")
Hello, pretty new to Graylog, I tried to install plugins to parse Cisco and Meraki logs but each plugins launch its own input with own port. What should i change in the input field to use an existing input ? I would li… --- ## [Csv\_parser failing](https://community.graylog.org/t/csv-parser-failing/31940)
**Author:** [@jammin2night](https://community.graylog.org/u/jammin2night)\ **Replies:** 0\ **Last updated:** [March 26, 2024, 3:10pm UTC](https://community.graylog.org/t/csv-parser-failing/31940 "2024-03-26T15:10:10Z")
Is cvs\_parser really a module? I would have thought it is a function withing the module im\_file ---- I am really new to nxlog but have it importing logs from other sources that are not cvs based - I have RTFM so obviousl… --- ## [GeoIP Setup - Need help](https://community.graylog.org/t/geoip-setup-need-help/31302)
**Author:** [@david81](https://community.graylog.org/u/david81)\ **Replies:** 13\ **Last updated:** [January 26, 2024, 12:05pm UTC](https://community.graylog.org/t/geoip-setup-need-help/31302 "2024-01-26T12:05:14Z")
Hi, I’m new to Graylog. I use Graylog to receive events that are written to Elasticsearch. Here I now also have entries that are visible from Sysmon on Windows devices with data\_win\_eventdata\_sourceIP and data\_win\_event… --- ## [I can't connect to graylog with graylog token](https://community.graylog.org/t/i-cant-connect-to-graylog-with-graylog-token/30790)
**Author:** [@melek](https://community.graylog.org/u/melek)\ **Replies:** 0\ **Last updated:** [November 27, 2023, 9:07am UTC](https://community.graylog.org/t/i-cant-connect-to-graylog-with-graylog-token/30790 "2023-11-27T09:07:57Z")
I can’t connect to the token I created for my user in Graylog. I did not encounter this problem in different graylog versions. I’m using Opensearch on the Graylog backend. Do I need to add a parameter to the graylog conf… --- ## [Anyone collecting to Graylog from iOS or Android apps? Silly idea?](https://community.graylog.org/t/anyone-collecting-to-graylog-from-ios-or-android-apps-silly-idea/830)
**Author:** [@mikemee](https://community.graylog.org/u/mikemee)\ **Replies:** 6\ **Last updated:** [November 14, 2023, 9:08am UTC](https://community.graylog.org/t/anyone-collecting-to-graylog-from-ios-or-android-apps-silly-idea/830 "2023-11-14T09:08:21Z")
Newbie question... I'd like to add some basic event logging to some mobile apps (e.g. \[appname, version, device, device\_os\_version\], \["Screen", "Home"\], \["SortOrder", "Descending"\])\_ so that I can answer some basic que… --- ## [Embedding external content](https://community.graylog.org/t/embedding-external-content/30486)
**Author:** [@weird-oecophylla](https://community.graylog.org/u/weird-oecophylla)\ **Replies:** 0\ **Last updated:** [October 27, 2023, 4:22pm UTC](https://community.graylog.org/t/embedding-external-content/30486 "2023-10-27T16:22:34Z")
Hi, I’m trying to find a way to embed external content inside graylog. I developped a graylog plugin embedding an iframe. However the content security policy prevent the iframe to be loaded and it seems not configurab… --- ## [Collecting Office365 & AzureAD audit logs using Graylog and Office Audit Collector](https://community.graylog.org/t/collecting-office365-azuread-audit-logs-using-graylog-and-office-audit-collector/30374)
**Author:** [@milos](https://community.graylog.org/u/milos)\ **Replies:** 1\ **Last updated:** [October 25, 2023, 4:44pm UTC](https://community.graylog.org/t/collecting-office365-azuread-audit-logs-using-graylog-and-office-audit-collector/30374 "2023-10-25T16:44:08Z")
Hello, we have implemented " Collecting Office365 & AzureAD audit logs using Graylog and Office Audit Collector" Initially, I have scheduled the job in crontab every 10 minutes but the collecting job generates heavy … --- ## [Context Collector for Graylog](https://community.graylog.org/t/context-collector-for-graylog/30285)
**Author:** [@ihe](https://community.graylog.org/u/ihe)\ **Replies:** 2\ **Last updated:** [October 16, 2023, 1:50pm UTC](https://community.graylog.org/t/context-collector-for-graylog/30285 "2023-10-16T13:50:59Z")
Last week on Graylog Go it was my pleasure to present the Context Collector for Graylog and release it under the same license as Graylog Open. The Context Collector plugin for Graylog unifies information scattered over … --- ## [Logs azure event hub](https://community.graylog.org/t/logs-azure-event-hub/30317)
**Author:** [@mnalves](https://community.graylog.org/u/mnalves)\ **Replies:** 1\ **Last updated:** [October 11, 2023, 8:23pm UTC](https://community.graylog.org/t/logs-azure-event-hub/30317 "2023-10-11T20:23:06Z")
i need to receive azure log events through event hub and I wanted to know if I can receive these events by installing a plugin. i tried searching the plugin market, but I couldn’t find any documentation. thanks in adva… --- ## [Is there a way to add a small Digital Clock in UTC](https://community.graylog.org/t/is-there-a-way-to-add-a-small-digital-clock-in-utc/29343)
**Author:** [@jamesdwi](https://community.graylog.org/u/jamesdwi)\ **Replies:** 2\ **Last updated:** [July 7, 2023, 7:08pm UTC](https://community.graylog.org/t/is-there-a-way-to-add-a-small-digital-clock-in-utc/29343 "2023-07-07T19:08:34Z")
Since many users aren’t upto speed on Timezone math, it would be handy to add a small Clock display that shows current time in UTC on dashboards, and bonus points, add a way to set the users choice of zone to display on… --- ## [How to integrate Aruba ClearPass Policy Manager (NAC) with Graylog?](https://community.graylog.org/t/how-to-integrate-aruba-clearpass-policy-manager-nac-with-graylog/28679)
**Author:** [@emgonzalez59](https://community.graylog.org/u/emgonzalez59)\ **Replies:** 3\ **Last updated:** [July 7, 2023, 7:07pm UTC](https://community.graylog.org/t/how-to-integrate-aruba-clearpass-policy-manager-nac-with-graylog/28679 "2023-07-07T19:07:16Z")
Hi there, Does anyone have any experience in integrating Graylog with Aruba ClearPass Policy Manager? FYI, It is a NAC with HPE Aruba Networking. I have defined Graylog in Clearpass to send syslog messages and Graylog… [Next page](https://community.graylog.org/c/addons/10.md?page=1)