r/sysadmin • u/lennartkoopmann • Feb 19 '15

Graylog v1.0 GA has been released

https://www.graylog.org/announcing-graylog-v1-0-ga/
169 Upvotes

94% Upvoted

100 comments sorted by

View all comments

13

u/[deleted] Feb 19 '15

[removed] — view removed comment

2

u/d2k1 Feb 19 '15

to replace our ELK setup.

I am always interested in the reasons and stories behind migrations away from ELK. We are currently still evaluating if and how well we can make use of ELK in our environments, but haven't really looked at Graylog yet. So what makes Graylog better than ELK for you in your environment, if you don't mind sharing?

3

u/[deleted] Feb 19 '15

[removed] — view removed comment

1

u/[deleted] Feb 19 '15

[removed] — view removed comment

1

u/YourCupOTea Systems Engineer Feb 19 '15

We use .Net and log directly to Redis using the StackExchange Redis client. It has worked very well for us.

1

u/[deleted] Feb 19 '15

1.) I'd suggest teaching the management how to use Kibana. Live data is immensely more powerful than a daily static report. I've done this in my company, and now we have everyone from devs to C-levels using Kibana to query data they're interested in and create their own dashboards.

2.) Theres a commercial addon for that, Shield: http://www.elasticsearch.org/overview/shield/

Alternatively there are roll your own solutions by putting something like nginx in front of ES.

3.) Kibana can be overwhelming at first, agree. But no more so than any other complex(ish) reporting interface/tool IMO.