Oct 12, 2025 · 8 min read · Introduction This article is part of the LAB | Cybersecurity series. Ubuntu & Windows are used as log sources, with Graylog Sidecar for centralized configuration/management of agents, and Filebeat / NXLog as the log shippers. Filebeat compensates for...
Join discussionOct 12, 2025 · 5 min read · 前言 本篇為 資安LAB系列。Ubuntu & Windows為日誌來源，搭配Graylog Sidecar設定與管理 agent，並實做透過Filebeat、NXLog來傳送日誌，Filebeat補足Syslog的不足，NXLog補足Window無法直接傳送Log的缺點 介紹 Graylog Sidecar Sidecar 不是用來「收日誌」的工具，而是安裝在各台來源主機上的代理管理。 從 Graylog 伺服器拉取並套用你在 UI 裡定義好的收集設定 (Collector Configur...
Join discussionSep 28, 2025 · 4 min read · 前言 本篇為 資安LAB系列。這裡走 Core 單節點教學：官方建議是 MongoDB 與 Graylog 同一台、Data Node 獨立一台；但本篇為 LAB 操作，為了降低複雜度，都裝在一台 LXC。安裝過程因以 root 登入，省略 sudo Graylog 三大核心架構 1) Graylog Server 職責： 接收 Inputs → 先落地 Disk Journal（緩衝） 解析/分流（Extractors、Pipelines、Streams） 寫入 索引層（Data No...
Join discussionSep 28, 2025 · 6 min read · Introduction This article is part of the LAB | Cybersecurity series. The focus here is a Core single-node setup: the official recommendation is to run MongoDB and Graylog on the same machine, and Data Node on a separate one; however, for the sake of ...
Join discussionJun 14, 2025 · 16 min read · Setting up a Graylog server on Ubuntu can seem overly technical and overwhelming, especially for beginners. However, despite the potential challenges, it's ironically straightforward. In this tutorial, I’ll take you step by step through how to set up...
Join discussion
Jul 28, 2024 · 6 min read · Overview Graylog is an open-source log monitoring solution with a long history. While the Web Interface is commonly used, utilizing the API allows for various purposes such as secondary processing of log data, aggregation, and alerting. This post su...
Join discussion
Apr 19, 2024 · 2 min read · Overview As a company's business expands, the number of servers that need to be managed increases. From the server administrator's perspective, it is necessary to monitor each server's situation frequently, as servers typically store various kinds o...
TLoyiso commented
Mar 12, 2024 · 10 min read · Overview This guide outlines the process of creating a Docker-based image for setting up a Graylog cluster in AWS cloud environment. Architecture MongoDB, OpenSearch, and Graylog must exist within the same VPC (or through VPC peering connections)...
JJamie commented
Mar 11, 2024 · 14 min read · Overview Graylog is an open-source centralized log management platform that enables the collection and management of logs from dispersed microservices centrally. It supports the unique Key-Value based GELF log format and, from version v4.0.0, suppor...
HHendi and 1 more commented
Oct 16, 2023 · 2 min read · 현장에 설치하는 Linux IoT 장치 운용시 로그 수집은 필수라고 생각한다. 장치 대수가 적을땐 SSH로 직접 확인할 수 있겠으나, 그것도 10대 넘어가기 시작하면 머리가 아파오기 시작한다. 그래서 Graylog 도입을 위해 설치를 해보려고 시도 한 기록이다. Requirement REST API 통해서 다른 Internal Tool에서 확인할 수 있어야 함 특정 이슈 발생 개발자/현장 서비스팀에 알림 전달 등을 위해 다양한 Log c...
Join discussion