# Graylog Labs

**URL:** https://community.graylog.org/c/graylog-labs/39.md

[Latest](https://community.graylog.org/latest.md) · [Categories](https://community.graylog.org/categories.md) · [Tags](https://community.graylog.org/tags.md)

---

## [About the Graylog Labs category](https://community.graylog.org/t/about-the-graylog-labs-category/26813)

<div class="topic-metadata">

**Author:** [@dscryber](https://community.graylog.org/u/dscryber)\
**Replies:** 0

</div>

What’s happening in the Graylog Labs?

---

## [Logs by severity level](https://community.graylog.org/t/logs-by-severity-level/36339)

<div class="topic-metadata">

**Author:** [@Pamela](https://community.graylog.org/u/Pamela)\
**Replies:** 1\
**Last updated:** [September 22, 2025, 10:30am UTC](https://community.graylog.org/t/logs-by-severity-level/36339 "2025-09-22T10:30:39Z")

</div>

Please help me with Graylog Sidecar and Winlogbeat. I’m filtering Windows logs by the log\_level: \[critial, error, warning\] field, but it’s not filtering. I’ve tried without the quotes and it’s not working. How do I filte…

---

## [Graylog Labs - Graylog Now Supports OTel (OpenTelemetry) via gRPC](https://community.graylog.org/t/graylog-labs-graylog-now-supports-otel-opentelemetry-via-grpc/35841)

<div class="topic-metadata">

**Author:** [@jivepig](https://community.graylog.org/u/jivepig)\
**Replies:** 0\
**Last updated:** [June 12, 2025, 6:36pm UTC](https://community.graylog.org/t/graylog-labs-graylog-now-supports-otel-opentelemetry-via-grpc/35841 "2025-06-12T18:36:39Z")

</div>

Did you check out 6.2 yet? We introduced OpenTelemetry as a new input. You can ingest logs via gRPC. This blog has the details.

---

## [Graylog - node not listening](https://community.graylog.org/t/graylog-node-not-listening/35632)

<div class="topic-metadata">

**Author:** [@elia](https://community.graylog.org/u/elia)\
**Replies:** 1\
**Last updated:** [May 17, 2025, 8:56pm UTC](https://community.graylog.org/t/graylog-node-not-listening/35632 "2025-05-17T20:56:17Z")

</div>

Good Evening,all My Graylog is not listening to any node, But when I perform TCPdump I got the message so I don’t what could be the issues; below the error message: |2025-05-17T15:31:30-04:00|star 29304814 / wihl-datan…

---

## [Setting up Graylog: - Error parsing YAML config file: yaml-cpp: error at line 22, column 3](https://community.graylog.org/t/setting-up-graylog-error-parsing-yaml-config-file-yaml-cpp-error-at-line-22-column-3/35604)

<div class="topic-metadata">

**Author:** [@elia](https://community.graylog.org/u/elia)\
**Replies:** 5\
**Last updated:** [May 17, 2025, 6:56pm UTC](https://community.graylog.org/t/setting-up-graylog-error-parsing-yaml-config-file-yaml-cpp-error-at-line-22-column-3/35604 "2025-05-17T18:56:41Z")

</div>

Good Evening,all I have completed the Graylog installation steps, but am getting this issue as I was creating certificate services. Below is the error message I am getting. Can you please assist me in fixing the problem…

---

## [Nxlog to Graylog / Nxlog config](https://community.graylog.org/t/nxlog-to-graylog-nxlog-config/33770)

<div class="topic-metadata">

**Author:** [@drx1984](https://community.graylog.org/u/drx1984)\
**Replies:** 5\
**Last updated:** [October 14, 2024, 2:46pm UTC](https://community.graylog.org/t/nxlog-to-graylog-nxlog-config/33770 "2024-10-14T14:46:54Z")

</div>

I want to send the login and failure logs from my Windows systems to Graylog via NXLog. Can anyone tell me how to adjust the NXLog configuration to make this work? I’ve already tried using a configuration but I’m not get…

---

## [Lab graylog on ubuntu 22.04, could not send log from windows 10 and windows server to graylog](https://community.graylog.org/t/lab-graylog-on-ubuntu-22-04-could-not-send-log-from-windows-10-and-windows-server-to-graylog/33107)

<div class="topic-metadata">

**Author:** [@Chadli](https://community.graylog.org/u/Chadli)\
**Replies:** 4\
**Last updated:** [July 30, 2024, 12:34pm UTC](https://community.graylog.org/t/lab-graylog-on-ubuntu-22-04-could-not-send-log-from-windows-10-and-windows-server-to-graylog/33107 "2024-07-30T12:34:00Z")

</div>

Hello The installation of Graylog on the Ubuntu server is done and I can access the web interface via my Windows host, I used a docker image for the installation. I also proceeded to install nxlog on my windows server v…

---

## [Problem starting Graylog](https://community.graylog.org/t/problem-starting-graylog/32761)

<div class="topic-metadata">

**Author:** [@Kacper123](https://community.graylog.org/u/Kacper123)\
**Replies:** 1\
**Last updated:** [June 19, 2024, 2:26pm UTC](https://community.graylog.org/t/problem-starting-graylog/32761 "2024-06-19T14:26:21Z")

</div>

Hello, I have a problem with running graylog open. I’m reaching a moment like in the screenshot. If I omit the node configuration, after waiting several minutes the graylog login window does not appear. What could be the…

---

## [Graylog Labs - Level Up Cybersecurity Alerting: Graylog x Pushover](https://community.graylog.org/t/graylog-labs-level-up-cybersecurity-alerting-graylog-x-pushover/32753)

<div class="topic-metadata">

**Author:** [@Seahawks](https://community.graylog.org/u/Seahawks)\
**Replies:** 1\
**Last updated:** [June 18, 2024, 5:17pm UTC](https://community.graylog.org/t/graylog-labs-level-up-cybersecurity-alerting-graylog-x-pushover/32753 "2024-06-18T17:17:47Z")

</div>

Hey Graylog folks! Got a second for a major security upgrade? :closed\_lock\_with\_key: Graylog’s new Pushover integration brings real-time threat alerts straight to your phone, tablet, or desktop. Total control over notif…

---

## [Graylog Labs - New Guide for configuring Nginx](https://community.graylog.org/t/graylog-labs-new-guide-for-configuring-nginx/32045)

<div class="topic-metadata">

**Author:** [@jivepig](https://community.graylog.org/u/jivepig)\
**Replies:** 2\
**Last updated:** [April 8, 2024, 8:13am UTC](https://community.graylog.org/t/graylog-labs-new-guide-for-configuring-nginx/32045 "2024-04-08T08:13:18Z")

</div>

Afternoon everyone, If you have not seen it yet, we have a post up configuring Nginx for load balancing Graylog. Check it out if you have not seen it yet. Enjoy! Comments welcome! Load Balancing Graylog With Nginx

---

## [Grayalert: new tool to detect not yet seen errors](https://community.graylog.org/t/grayalert-new-tool-to-detect-not-yet-seen-errors/31095)

<div class="topic-metadata">

**Author:** [@grayalert](https://community.graylog.org/u/grayalert)\
**Replies:** 1\
**Last updated:** [January 16, 2024, 6:55pm UTC](https://community.graylog.org/t/grayalert-new-tool-to-detect-not-yet-seen-errors/31095 "2024-01-16T18:55:18Z")

</div>

Dear Graylog Community, I’ve been using Graylog for years and now developed a tool to detect new errors (especially useful after the release of a new version of a microservice or so). I’m pleased to introduce GrayAlert…

---

## [Graylog Labs - Feeding you First SIEM with Graylog](https://community.graylog.org/t/graylog-labs-feeding-you-first-siem-with-graylog/31017)

<div class="topic-metadata">

**Author:** [@Joel\_Duffield](https://community.graylog.org/u/Joel_Duffield)\
**Replies:** 0\
**Last updated:** [December 21, 2023, 7:10pm UTC](https://community.graylog.org/t/graylog-labs-feeding-you-first-siem-with-graylog/31017 "2023-12-21T19:10:51Z")

</div>

Hey Graylog community! I gave a talk a while back about how to think through what you should (and shouldn’t) add to your SIEM as you start off your logging journey. I am happy to share that the talk has now been turned…

---

## [Graylog Labs - Getting Your Daily Security News Fix inside Graylog](https://community.graylog.org/t/graylog-labs-getting-your-daily-security-news-fix-inside-graylog/30839)

<div class="topic-metadata">

**Author:** [@kpearson](https://community.graylog.org/u/kpearson)\
**Replies:** 0\
**Last updated:** [December 1, 2023, 11:40am UTC](https://community.graylog.org/t/graylog-labs-getting-your-daily-security-news-fix-inside-graylog/30839 "2023-12-01T11:40:45Z")

</div>

Hey folks, back with another blog, this time a mad hatter idea I had about ingesting your favourite security news sources into Graylog as events to get your fix in a dashboard. Initially, I was thinking about automatical…

---

## [Parsing SQL Login Events into Graylog](https://community.graylog.org/t/parsing-sql-login-events-into-graylog/30796)

<div class="topic-metadata">

**Author:** [@jivepig](https://community.graylog.org/u/jivepig)\
**Replies:** 0\
**Last updated:** [November 27, 2023, 6:44pm UTC](https://community.graylog.org/t/parsing-sql-login-events-into-graylog/30796 "2023-11-27T18:44:49Z")

</div>

Hello everyone, Joel Duffield one of our Solution Engineers has a great example here how to parse SQL Login Events into Graylog with the Graylog Schema. Let us know what else you are doing with SQL logs.

---

## [Graylog Labs - Hey Everyone quick tip on Parsing Logs](https://community.graylog.org/t/graylog-labs-hey-everyone-quick-tip-on-parsing-logs/30768)

<div class="topic-metadata">

**Author:** [@jivepig](https://community.graylog.org/u/jivepig)\
**Replies:** 0\
**Last updated:** [November 23, 2023, 2:36pm UTC](https://community.graylog.org/t/graylog-labs-hey-everyone-quick-tip-on-parsing-logs/30768 "2023-11-23T14:36:25Z")

</div>

Many of you probably already know, but just to bring a very fast way to parse logs that have key values and fields, Chris Black Graylog’s Senior Solution Engineer runs you through a quick example you can pin to your pars…

---

## [Graylog Labs - Graylog Parsing Rules and AI Oh My!](https://community.graylog.org/t/graylog-labs-graylog-parsing-rules-and-ai-oh-my/29940)

<div class="topic-metadata">

**Author:** [@tellistone](https://community.graylog.org/u/tellistone)\
**Replies:** 1\
**Last updated:** [August 29, 2023, 6:25pm UTC](https://community.graylog.org/t/graylog-labs-graylog-parsing-rules-and-ai-oh-my/29940 "2023-08-29T18:25:12Z")

</div>

Hey guys I’ve written a (long) blog post about the dark art of writing parsing rules for logs for your enjoyment. There are a lot of practical examples for copy-pasting, and also a link to a hot ChatGPT-based grok parsi…

---

## [Graylog Labs - Webinar July 12 CREATE SIEM ALERTS FOR AUTOMATED EFFICIENCY](https://community.graylog.org/t/graylog-labs-webinar-july-12-create-siem-alerts-for-automated-efficiency/29455)

<div class="topic-metadata">

**Author:** [@Seahawks](https://community.graylog.org/u/Seahawks)\
**Replies:** 0\
**Last updated:** [July 6, 2023, 9:02pm UTC](https://community.graylog.org/t/graylog-labs-webinar-july-12-create-siem-alerts-for-automated-efficiency/29455 "2023-07-06T21:02:02Z")

</div>

Register: https://lnkd.in/gQAg46uG Hello everyone! My name is Ethan Keaton, I am thrilled to be hosting an upcoming webinar on the exciting topic of CREATE SIEM ALERTS FOR AUTOMATED EFFICEINCY. With extensive experien…

---

## [Grabylog Labs - A Guide to Normalizing Your Logs](https://community.graylog.org/t/grabylog-labs-a-guide-to-normalizing-your-logs/29306)

<div class="topic-metadata">

**Author:** [@jim\_dawson](https://community.graylog.org/u/jim_dawson)\
**Replies:** 1\
**Last updated:** [June 26, 2023, 12:48pm UTC](https://community.graylog.org/t/grabylog-labs-a-guide-to-normalizing-your-logs/29306 "2023-06-26T12:48:29Z")

</div>

Hi everyone, I’ve written a new blog article on normalizing your logs. This topic is so important to effective log management and analysis. I hope it’s got some useful information for some of you who are just starting o…

---

## [Graylog Labs Case Study: Building an Operations Dashboard](https://community.graylog.org/t/graylog-labs-case-study-building-an-operations-dashboard/29099)

<div class="topic-metadata">

**Author:** [@tellistone](https://community.graylog.org/u/tellistone)\
**Replies:** 1\
**Last updated:** [June 8, 2023, 8:27pm UTC](https://community.graylog.org/t/graylog-labs-case-study-building-an-operations-dashboard/29099 "2023-06-08T20:27:50Z")

</div>

Hi guys, I used to post here pretty frequently until I moved to the Professional Services side of our org and got terribly busy :smile: I recently put together a blog post which I think might be useful to a lot of peop…

---

## [Graylog Labs - Securing Graylog With Tls](https://community.graylog.org/t/graylog-labs-securing-graylog-with-tls/28757)

<div class="topic-metadata">

**Author:** [@drewmiranda-gl](https://community.graylog.org/u/drewmiranda-gl)\
**Replies:** 0\
**Last updated:** [May 11, 2023, 5:16pm UTC](https://community.graylog.org/t/graylog-labs-securing-graylog-with-tls/28757 "2023-05-11T17:16:51Z")

</div>

Have you ever wanted to configure graylog web to use HTTPS/TLS, but did not know how, or ran into too many issues? I’ve just published a comprehensive guide on how to do this while avoiding all the pitfalls and sharp ed…

---

## [Graylog Labs Article - Redacting Message Fields for Privacy Purposes](https://community.graylog.org/t/graylog-labs-article-redacting-message-fields-for-privacy-purposes/27000)

<div class="topic-metadata">

**Author:** [@jim\_dawson](https://community.graylog.org/u/jim_dawson)\
**Replies:** 1\
**Last updated:** [March 28, 2023, 8:35am UTC](https://community.graylog.org/t/graylog-labs-article-redacting-message-fields-for-privacy-purposes/27000 "2023-03-28T08:35:58Z")

</div>

Hey everyone! I’m Jim Dawson, a Solutions Engineer here at Graylog. I work with a lot of customers who have privacy concerns regarding their logs, for instance, users in Germany who fall under BDSG want anonymisation or…

---

## [Graylog Labs - How I used Graylog to Fix my Internet Connection](https://community.graylog.org/t/graylog-labs-how-i-used-graylog-to-fix-my-internet-connection/28161)

<div class="topic-metadata">

**Author:** [@mcdowellster](https://community.graylog.org/u/mcdowellster)\
**Replies:** 1\
**Last updated:** [March 20, 2023, 6:02pm UTC](https://community.graylog.org/t/graylog-labs-how-i-used-graylog-to-fix-my-internet-connection/28161 "2023-03-20T18:02:54Z")

</div>

Hello Everyone, I’m Dan McDowell and I’m a Professional Services Engineer at graylog. I come from a background of sysadmin, infrastructure automation, centralized management and wireless ISPs. I’m an MECM/SCCM SME, open…

---

## [Graylog Labs - Ingesting Google Cloud Audit Logs with Graylog](https://community.graylog.org/t/graylog-labs-ingesting-google-cloud-audit-logs-with-graylog/28047)

<div class="topic-metadata">

**Author:** [@kpearson](https://community.graylog.org/u/kpearson)\
**Replies:** 0\
**Last updated:** [March 10, 2023, 10:30am UTC](https://community.graylog.org/t/graylog-labs-ingesting-google-cloud-audit-logs-with-graylog/28047 "2023-03-10T10:30:57Z")

</div>

Hey Folks, As this is my first actual post, just to introduce myself, I’m Kyle Pearson and I am a solutions engineer here at Graylog, I’ve been a consultant in the log management and SIEM space for a few years and have …

---

## [Upgrading Graylog V4.3 to V5.0](https://community.graylog.org/t/upgrading-graylog-v4-3-to-v5-0/27714)

<div class="topic-metadata">

**Author:** [@jivepig](https://community.graylog.org/u/jivepig)\
**Replies:** 6\
**Last updated:** [March 8, 2023, 5:52am UTC](https://community.graylog.org/t/upgrading-graylog-v4-3-to-v5-0/27714 "2023-03-08T05:52:04Z")

</div>

Hey there, Jeff Darrington here. I thought I’d share a blog post with the Upgrade commands and video for upgrading Graylog V4.3 running OpenSearch 1.3 to V5 and OpenSearch 2.5. There is now a .deb package available fro…

---

## [Risk Assessments Critical to Securing Mid-Market Organizations in 2023](https://community.graylog.org/t/risk-assessments-critical-to-securing-mid-market-organizations-in-2023/27932)

<div class="topic-metadata">

**Author:** [@joe.gross](https://community.graylog.org/u/joe.gross)\
**Replies:** 0\
**Last updated:** [March 2, 2023, 4:04pm UTC](https://community.graylog.org/t/risk-assessments-critical-to-securing-mid-market-organizations-in-2023/27932 "2023-03-02T16:04:40Z")

</div>

In a recent Cyber Defense Magazine article\*\*, Joe Gross, Director of Solutions Engineering at Graylog\*\* , argues that cybersecurity risk assessments are an invaluable tool in combating cyber threats. And when utilized co…

---

## [Graylog Labs - Risk Based Alerts Using Lookup Tables](https://community.graylog.org/t/graylog-labs-risk-based-alerts-using-lookup-tables/27709)

<div class="topic-metadata">

**Author:** [@jim\_dawson](https://community.graylog.org/u/jim_dawson)\
**Replies:** 1\
**Last updated:** [February 14, 2023, 4:26pm UTC](https://community.graylog.org/t/graylog-labs-risk-based-alerts-using-lookup-tables/27709 "2023-02-14T16:26:13Z")

</div>

Hey everyone, Hope you’re all having a great day! I’m sharing a blog post I’ve written that walks through how to use Lookup Tables as part of Event Definitions. It’s a super powerful way to expand the Alerting capabili…

---

## [Graylog Labs - Time Zones: A logger's worst nightmare](https://community.graylog.org/t/graylog-labs-time-zones-a-loggers-worst-nightmare/27416)

<div class="topic-metadata">

**Author:** [@drewmiranda-gl](https://community.graylog.org/u/drewmiranda-gl)\
**Replies:** 4\
**Last updated:** [January 30, 2023, 6:18pm UTC](https://community.graylog.org/t/graylog-labs-time-zones-a-loggers-worst-nightmare/27416 "2023-01-30T18:18:11Z")

</div>

Hey Y’all! While I’m no stranger to Graylog, this is my first Graylog Labs post and wanted to take the opportunity to formally introduce myself! My name is Drew Miranda and I’m a Solution Engineer (SE) here at Graylog.…

---

## [Graylog Labs - Dope Docs - Puppet, Chef, Ansible](https://community.graylog.org/t/graylog-labs-dope-docs-puppet-chef-ansible/26822)

<div class="topic-metadata">

**Author:** [@joe.gross](https://community.graylog.org/u/joe.gross)\
**Replies:** 2\
**Last updated:** [December 9, 2022, 6:53pm UTC](https://community.graylog.org/t/graylog-labs-dope-docs-puppet-chef-ansible/26822 "2022-12-09T18:53:10Z")

</div>

Howdy there Graylog People, Chris here again. I wanted to share with you a section of the documentation you may not be aware of. We often get requests for configurations for automation platforms. Well, here it is. Play…

---

## [Graylog Labs Video - Reference Architecture](https://community.graylog.org/t/graylog-labs-video-reference-architecture/26801)

<div class="topic-metadata">

**Author:** [@joe.gross](https://community.graylog.org/u/joe.gross)\
**Replies:** 10\
**Last updated:** [December 9, 2022, 6:52pm UTC](https://community.graylog.org/t/graylog-labs-video-reference-architecture/26801 "2022-12-09T18:52:25Z")

</div>

Howdy Graylog People, Chris Black here. Senior Solutions Engineer at Graylog. I’m very pleased to announce the first installment in a series of content that will be released under the “Graylog Labs” moniker. The content…
