Graylog3, ELK 6.x and Grafana

it is correct - the universal search does not work. But the stream based search will work with the user that has access to this stream.

But at all - the direct search in elasticsearch differs from the search via Graylog. So the next logical step would be having Graylog source in Grafana …