Garylog 3.1 lookup tables


Just built a brand new 3.1 Graylog instance, and in the process of migrating over. I don’t seem to have any pre-configured lookup tables in this version:

vs this in our 2.5.1 install:

I was setting up TOR node and Threat Intel lookups. Have I broken something, or do these need to be set up from scratch in 3.1?



we decided not install the lookup tables by default.

So you can install them in System > Content packs and select the pre defined you want to have …

We decided to not overload the system already with lookup tables the user might never use.

1 Like

Aha! Perfect, thank you!


This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.