EventLog monitor for Graylog

[Henrylam]

Hi All,

Is it possible to log the event on Gralog, such as create/ delete user, password change?

I only got some error log in /var/log/graylog-server/server.log

OS Information: RHEL 7.9
Package Version: Graylog 4.0.5+d95b909

Thanks for giving help

[tellistone (Tully Elliston)]

Hi Henrylam

As indicated by the log messages there, audit logging is implemented but is an Enterprise-only feature.

You can get a free Enterprise Liscence good for up to 5gb ingestion per day here:
https://www.graylog.org/downloads/free-enterprise

[Henrylam]

Thanks tellistone. I will look into it.