Self-hostable observability platform for logs, metrics, traces, RUM and LLM monitoring, built in Rust and positioned as an alternative to Datadog and Splunk.
Graylog2/graylog2-server
Graylog is a free, open log management platform for collecting, searching and analyzing log data.
Open-source alternative to:Splunk
Datadog Logs
- Stars
- 8,163
- Forks
- 1,137
- Open issues
- 2,107
- Last commit
- 14 hours ago
What is it?
Graylog is a log management platform that gathers log messages from servers, applications and devices so they can be searched and analyzed in one place. It is aimed at operations, security and development teams who need a central view of what their systems are logging.
The project's metadata lists support for GELF, syslog, AMQP and Kafka as ways to get logs in, and tags it for SIEM and security logging use. The server is written in Java and distributed through Maven Central.
The project is published under the Server Side Public License (SSPL), which is a source-available license rather than a standard OSI-approved open source license.
Key features
- 01Accepts logs over GELF, syslog, AMQP and Kafka
- 02Central search and analysis of collected log messages
- 03Suitable for security information and event management (SIEM) workflows
- 04Java-based server available from Maven Central
Use cases
- Centralizing logs from many servers and applications for search
- Monitoring system and application logs for operational issues
- Supporting security teams with log-based event analysis
Quick start
- 1
Read the contributing guide and documentation to get started
- 2
Visit the official documentation for installation instructions
Things to know
- Licensed under the Server Side Public License (SSPL), which is not an OSI-approved open source license.
- The README does not provide a direct build or run command, so setup requires following the external documentation.
In collections
Topics
FAQ
- What is graylog2-server?
- Graylog is a free, open log management platform for collecting, searching and analyzing log data. Graylog is a log management platform that gathers log messages from servers, applications and devices so they can be searched and analyzed in one place. It is aimed at operations, security and development teams who need a central view of what their systems are logging.
- Is graylog2-server free to use? What license does it have?
- graylog2-server is open source under the Other license. Check the license terms before using it in commercial products.
- Is graylog2-server still maintained?
- Actively maintained. The last commit to graylog2-server was on Oct 23, 2026.
- What can I use graylog2-server for?
- Centralizing logs from many servers and applications for search Monitoring system and application logs for operational issues Supporting security teams with log-based event analysis
- How do I install graylog2-server?
- Read the contributing guide and documentation to get started Visit the official documentation for installation instructions
- Where can I get graylog2-server?
- The source code and installation instructions are on GitHub: https://github.com/Graylog2/graylog2-server
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
A generic, vendor-neutral signature format for describing log-based detections, plus a large shared library of ready-to-use Sigma rules.
Horizontally scalable, multi-tenant log aggregation system that indexes only labels, not log contents, from Grafana Labs.
A terminal log file viewer that merges, follows, and searches multiple log files with SQL and regex support.
Open source observability platform in Rust that stores logs, metrics, traces and events on object storage in a single binary.
A PHP logging library that sends logs to files, sockets, email, databases and various web services, implementing PSR-3.