We use our current syslog server to put a name with a serial number and matching other similar data against our own records. This way when we get a notification it contains useful human readable information. We’re evaluating Graylog as a replacement, could someone please point me in the right direction for doing this with Graylog? Thanks.
Future versions of Graylog will include the possibility to implement lookups on different sources, but currently that’s not supported.
https://github.com/Graylog2/graylog-plugin-pipeline-processor/issues/27