Finally! Graylog2 v0.10.0 has arrived. Read what's new on the release page.
Graylog2 Open source. Log management.

About

Graylog2 is an open source log management solution that stores your logs in ElasticSearch. It consists of a server written in Java that accepts your syslog messages via TCP, UDP or AMQP and stores it in the database. The second part is a web interface that allows you to manage the log messages from your web browser. Take a look at the screenshots or the latest release info page to get a feeling of what you can do with Graylog2.

The web interface

All data sent to Graylog2 will appear in the web interface. Use the web interface to search and filter your data. A core part of the web interface are streams: They basically are saved searches that allow you to quickly access an overview that is already pre-filtered to match for example specific parts of your application. You can also run monitoring and alerting on single streams or directly forward all messages that are matched into a stream to other endpoints.

How do I send my log data?

The Graylog2 server accepts standard syslog via TCP/UDP and GELF via UDP, TCP and HTTP. You can also send in both formats via AMQP (AMQP Docs). You can configure your syslog daemons to send their data to Graylog2 or log directly from within your applications.

Make sure to check out Logstash and logix which are both free (and open source) and are very useful to forward or send logs to your Graylog2 instance. Also take a look at Gelfino, a tiny GELF server you can use as forwarder endpoint to do even more awesome stuff with your logs.



Graylog Extended Log Format

The Graylog Extended Log Format (GELF) avoids the shortcomings of classic syslog. It is perfect for sending log messages from within your applications in an easy and structured way. There are libraries and log appenders for Ruby, PHP (and log4php), Python, Perl/Log4Perl, Java/Log4j (gelf4j, gelfj), Log4r, .NET/log4net, node.js (node-graylog, gelf-node, gelf-stream (Bunyan compatible)), NLog, Logback plugin, resque, systemd, Golang / Go #1, Golang / Go #2, and Rack. Read more about it here: GELF.