Getting Started with Graylog Collector
Getting logs off a host and into your SIEM should be the easy part. In practice, it often means installing a third-party shipper, writing a local config file, and then repeating that work on every host you add. Graylog 7.2 introduces a different approach: Graylog Collector, a native log shipper that you install once and […]
Monitoring Networks with Snort IDS-IPS
Networks are the data highways upon which you build your digital transformation infrastructure. Like interstate highways transmit goods, networks transmit data. Every connected user and device is a network digital on-ramp. When malicious actors gain unauthorized access to networks, organizations must detect and contain them as quickly as possible, requiring security analysts to embark on […]
What are Data Residency Laws and How Do They Apply to Log Data?
Most conversations about data residency run into the same problem. Companies build data protection programs around customer records and databases, then send audit logs, session data, and IP addresses through observability tools. This data often resides wherever the vendor runs its cloud infrastructure, meaning that log data may be outside a company’s geographic region. While […]
Detecting PHP2Shell CVEs with Graylog
PHP shipped emergency patches on October 21, 2026, for two unauthenticated remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, known together as PHP2Shell. Both are rated 9.2 under CVSS 4.0. A working exploit leaked ahead of the coordinated disclosure, and Sansec expected mass exploitation within fifteen minutes of the release. Patch asap. Then work out whether […]
What’s New In Graylog 7.2 Webinar
What to Expect? Graylog 7.2 is built around one idea: your team shouldn’t need more headcount or budget to get more visibility, faster detection, and easier compliance. Join us for a 20-minute walkthrough and live demo of the biggest additions in this release, followed by 10 minutes of open Q&A. Agentic AI triage, built in […]
How Security Teams Can Use Sankey Charts
The era of the paper, difficult-to-fold map has long since passed. Today, nearly everyone who goes out on a drive takes a smartphone or other digital navigation device that uses GPS. Many of these applications help you find the roads you need and give you workarounds to prevent traffic from impacting your travel time. In […]
Watchlists in Graylog Security
Every security team keeps a short list of things it needs to see the moment they show up: a suspicious IP, a compromised account, a known-bad file hash, a port that should never be open. Graylog has always let you track those values, and the improved Watchlists feature in Graylog Security makes them a first-class […]
Graylog 7.2: AI-Ready Triage, Smarter Platform Management, and the New Graylog Collector
It is with real excitement, and no small amount of pride, that I get to introduce Graylog 7.2. This release is built around three challenges analysts and platform administrators face every day: alert overload from AI-accelerated threats, the operational weight of managing a SIEM, and the friction of getting usable data in cleanly. Challenge […]
Critical Windows Event ID’s to Monitor
Like most organizations, your company likely invested in various Microsoft products. The Microsoft ecosystem provides businesses with nearly every kind of technology necessary, from workstation operating systems to Azure to Windows 365 that includes cloud-native versions of their traditional Office tools and the communication platform Teams. However, attackers are just as invested in the Microsoft […]
India’s Data Protection Law: The Digital Personal Data Protection Act
In 2023, India’s Parliament approved and published The Digital Personal Data Protection Act (DPDPA). In many ways, the DPDPA is similar to other regulations, like the General Data Protection Regulation (GDPR). It establishes a similar data subject, or in this case Data Principal, rights of notice, consents, access, correction, and erasure. In other ways, the […]
The Value of a Robust Vulnerability Management Program
Back before live security video feeds in homes, people would walk around at night checking to make sure they locked every window and door. They took these precautions because they knew that a single open lock gave burglars an opportunity to steal from them. For organizations, vulnerability management programs are a way to lock the […]
What To Know About Parsing JSON
If you grew up in the 80s and 90s, you probably remember your most beloved Trapper Keeper. The colorful binder contained all the folders, dividers, and lined paper to keep your middle school and high school self as organized as possible. Parsing JSON, a lightweight data format, is the modern, IT environment version of that […]