EventLog monitor for Graylog

Hi All,

Is it possible to log the event on Gralog, such as create/ delete user, password change?

I only got some error log in /var/log/graylog-server/server.log

OS Information: RHEL 7.9
Package Version: Graylog 4.0.5+d95b909

Thanks for giving help

Hi Henrylam

As indicated by the log messages there, audit logging is implemented but is an Enterprise-only feature.

You can get a free Enterprise Liscence good for up to 5gb ingestion per day here:
https://www.graylog.org/downloads/free-enterprise

1 Like

Thanks tellistone. I will look into it.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.