What

Graylog2 is an open source syslog implementation that stores your logs in MongoDB. It consists of a server written in Java that accepts your syslog messages via TCP or UDP and stores it in the database. The second part is a Ruby on Rails web interface that allows you to view the log messages.

Features

• Accepts syslog messages via TCP/UDP
• Fast backend via MongoDB
• GELF (Graylog Extended Log Format)
• Blacklists
• Filtering
• Statistics

Graylog2 in production

Jimdo, a successful German hosted website creator with more than 2.000.000 users is using Graylog to monitor the syslog messages of all servers.

News

Follow Lennart's blog to stay up to date with the Graylog2 development process.

History / Author

The first version of Graylog has been written for Jimdo in August 2009. It was just a Rails frontend for the MySQL Database of rSyslog, not very fast and needed to be replaced soon. Lennart Koopmann, the author of Graylog1, decided to write an own Syslog server that was able to store the received syslog data in MongoDB to allow fast searches, blacklisting etc. - The first release of Graylog2 is planned for June 2010.