Cyber Defense with MITRE Framework | Graylog + SOC Prime | On-Demand Webinar >> ​

Graylog Marketplace: 80+ Add-Ons and Growing

After a month in beta, we’re excited to announce the official launch of Graylog Marketplace. A big thanks to the beta users who have downloaded add-ons, contributed your own add-ons, and helped spread the word.


Graylog Marketplace is the new destination to download and contribute pluggable extensions to help address specific use cases. We don’t want you going on long scavenger hunts through outdated blogs and GitHub gists to find the add-ons and extensions you need.

It’s now fast and easy to find Graylog add-ons in one central place. Since the Marketplace is integrated with Github, it’s also super fast and easy to contribute and manage your own add-ons. There’s also a rating and commenting functionality to encourage feedback. Graylog Marketplace is an extension of our growing ecosystem that will facilitate collaboration and creativity.

We’re not stopping there. Pretty soon the Marketplace will be integrated into the Graylog web interface. With just one click, you will soon be able to support a specific log source or add an integration (like Slack).


Over the past month, we’ve migrated all existing Graylog add-ons to the Marketplace. Many of you have also submitted content (thanks!).

There are four different types of content in the Marketplace:

  • Content Pack: A file that can be uploaded into your Graylog system that sets up streams, inputs, extractors, dashboards, etc. to support a given log source or use case.
  • GELF Library: A library for a programming language or logging framework that supports sending log messages in GELF format for easy integration and pre-structured messages.
  • Plug-Ins: Code that extends Graylog to support a specific use case that it doesn’t support out of the box.
  • Other Solutions: Any other content or guide that helps you integrate Graylog with an external system or device. For example, how to configure a specific device to support a format Graylog understands out of the box.

If you’re new to the Graylog Marketplace, here are six popular add-ons you could check out first:

  • HTTP Monitor Input Plugin (sivasamyk) – A plugin that regularly polls HTTP resources and stores information about status, timings. This way you can monitor the performance and status of any HTTP resource without installing and configuring a collector.
  • Web HDFS Output Plugin (sivasamyk) – An output plugin to forward messages from Graylog to Hadoop HDFS. Use this to store messages in Hadoop for long-term storage or analysis.
  • Active Directory Auditing Content Pack (reighnman) – This is a content pack that provides several useful dashboards for auditing Active Directory events together with a stream that catches failed logins.
  • Microsoft Windows DNS Content Pack (reighnman) – A set of extractors, grok patterns and dashboards to make managing Microsoft Windows DNS logs easy and easy to get started with.
  • NetFlow Input Plugin (bernd) – This plugin provides a NetFlow UDP input to act as a Flow collector that receives data from Flow exporters. Each received Flow will be converted to a Graylog message.
  • SNMP Plugin (bernd) – Use this plugin to point your devices that support SNMP to a configured IP address and port to receive SNMP traps.


The Marketplace is in its early days, which means now is a great time to become a top contributor. If you’ve already developed your own Graylog extensions for personal use, sharing your content to the Marketplace could save someone hours or days, and earn you a ton of Graylog karma. You only need 5 minutes to become a community hero.

Not sure what to contribute? Here is a Most Wanted List of popular integrations for inspiration. Let us know if you think something is missing.

  • Apache
  • AWS
  • Cisco
  • Firewall
  • FortiGate
  • HAProxy
  • IIS
  • Juniper
  • MySQL
  • Oracle
  • Palo Alto
  • pfSense
  • Postfix
  • Snort
  • SonicWALL
  • Squid
  • Tomcat
  • VMware
  • Windows
  • Zabbix

Contributing your content is easy. All the info can be found here.

If you’ve made it this far, stop reading and visit the Marketplace to extend your Graylog setup today.

Get the Monthly Tech Blog Roundup

Subscribe to the latest in log management, security, and all things Graylog blog delivered to your inbox once a month.