Send Graylog logs to Elastic SIEM

Dear all, I have a Graylog 3 server running OK,with a lot of network and hosts data.

Now I have to send all of these data to a Elastic SIEM 7.7 server I’ve implemented this month.

Is it possible to create a Graylog output and send logs to the Elastic SIEM (ELK stack) in order to have more analysis and detection capacity???

Special thanks !!!

Have you tried Outputs?

https://docs.graylog.org/en/3.2/pages/streams.html?highlight=output#outputs

For some types I do know you need specific Output plugin, but I see there are STDOUT and GELF ouputs, not sure if Elastic SIEM supports them.

OK, thanks a lot…I will try again because I used a GELF output and I can’t see any log on SIEM.

Regards !!!

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.