Graylog

Graylog is a log management and SIEM platform used by security, IT and audit teams. It collects logs, searches them and turns risky events into alerts and incidents that can be investigated.

Graylog gathers log data from many sources and makes it searchable. Alerts are scored by risk, and related alerts can be grouped into incidents for triage. The platform supports threat detection, investigation and response, and it includes reporting that helps teams answer audit requests and show compliance with common mandates. Its AI features are described as explaining their reasoning, so analysts can check why an alert was raised.

• Log search and analytics
• Risk-scored alerts that become incidents
• Threat detection and investigation
• Compliance and audit reporting
• Dashboards for common security use cases

Security operations teams, IT administrators and small teams that handle both security and operations. Compliance staff who answer audit questions are another likely audience.

Pricing is not stated on the page, so a demo or contact with sales is the usual step before buying. The site lists an open source edition alongside its enterprise products, and the product runs on the team's own infrastructure. Costs grow with the volume of log data you keep, so review retention before rolling it out widely.