Hello All! Please pardon me if this is a duplicate thread, but I am new to this community and new to Graylog. I am starting a small project that aims to provide better visibility (from a security view point) and I want to use Graylog as the main tool for this. As mentioned I have had very little e…

Hello && Welcome!! A lot of what you are looking for can be found in Documentation and in the blogs pages. If you are going for a SOC and are getting serious about it, I would consider purchasing the full product to make sure things go smoothly!

I have a fairly solid experience with setting up SOCs centred around Graylog. As such, I’ll share a few thoughts below : Defining the logs that should be send to Graylog - any advice on this? You should pull as many useful logs as possible from your environment, a good starting point is AD, Fir…

Thank you both for your input! :slight_smile:

I have nothing really to add to this. Sitting down beforehand and define field names to use across all streams is a big gain in the long run. I had this struggle once and do not want to fight it again. Think about the resources to build up everything one by one. Don’t work on to many use cases the …

How to build your SOC with Graylog

Graylog Central (peer support)

tmacgbay (Tmacgbay) August 30, 2022, 4:51pm 6

I wanted to ad this post for Graylog Schema - It’s has good reference points for being consistent… particularly if you might move to the paid product in the future!

Topic		Replies	Views
Need some new to graylog Graylog Central (peer support)	1	624	July 2, 2019
SIEM open source and Graylog Graylog Central (peer support)	1	676	March 26, 2020
Graylog newbie, installed it from the docs, it works 100% Graylog Central (peer support)	2	396	July 11, 2023
Create graylog 3 as a SOC and SIEM , to analyse log From Fortinet Graylog Central (peer support)	6	2201	July 10, 2019
Correlation logs Graylog Central (peer support)	4	1321	May 20, 2019

How to build your SOC with Graylog

Related topics