--- description: Learn more about Graylog pricing, benefits, and disadvantages for your business in Canada. Read verified software reviews and find tools that fit your business needs. image: https://gdm-localsites-assets-gfprod.imgix.net/images/capterra/og_logo-e5a8c001ed0bd1bb922639230fcea71a.png?auto=format%2Cenhance%2Ccompress title: Graylog Pricing, Reviews & Features - Capterra Canada 2026 --- Breadcrumb: [Home](/) > [Log Analysis Solutions](/directory/32917/log-analysis/software) > [Graylog](/software/183539/graylog) # Graylog Canonical: https://www.capterra.ca/software/183539/graylog Page: 1 / 3\ Next: [Next page](https://www.capterra.ca/software/183539/graylog?page=2) > Open, AI-powered SIEM and log management that helps lean teams detect threats faster, reduce noise, and control data costs. > > Verdict: Rated **4.6/5** by 32 users. Top-rated for **Likelihood to recommend**. ----- ## Overview ### Who Uses Graylog? Mid-market and enterprise organizations with small to mid-sized security or IT teams (1–5 analysts) seeking an open, cost-controlled SIEM and centralized log management across cloud or on-prem. ## Quick Stats & Ratings | Metric | Rating | Detail | | **Overall** | **4.6/5** | 32 Reviews | | Ease of Use | 4.1/5 | Based on overall reviews | | Customer Support Software | 4.3/5 | Based on overall reviews | | Value for Money | 4.7/5 | Based on overall reviews | | Features | 4.4/5 | Based on overall reviews | | Recommendation percentage | 90% | (9/10 Likelihood to recommend) | ## About the vendor - **Company**: Graylog - **Location**: Houston, US - **Founded**: 2009 ## Commercial Context - **Pricing model**: Usage Based (Free version available) (Free Trial) - **Pricing Details**: Pls contact us for pricing details - **Target Audience**: 11–50, 51–200, 201–500, 501–1,000, 1,001–5,000, 5,001–10,000, 10,000+ - **Deployment & Platforms**: Cloud, SaaS, Web-based, Mac (Desktop), Windows (Desktop), Linux (Desktop), Windows (On-Premise), Linux (On-Premise), Chromebook (Desktop) - **Supported Languages**: English - **Available Countries**: Australia, Austria, France, Germany, South Africa, Switzerland, United Arab Emirates, United Kingdom, United States ## Features - Activity Dashboard - Alerts/Notifications - Anomaly Detection - Application Security - Archiving & Retention - Audit Trail - Behavioral Analytics - Compliance Tracking - Correlation Analysis - Customizable Dashboard - Data Analysis Tools - Data Visualization Software - Endpoint Management - Event Logs - Log Analysis - Log Collection - Log Management Software - Network Monitoring Software - Pattern Detection and Recognition - Real-Time Monitoring - Reporting/Analytics - Search/Filter - Server Logs - Threat Intelligence - Threshold Alerts ## Integrations (6 total) - AWS for Data - Azure Files - Google Cloud - Microsoft 365 - NXLog - Okta ## Support Options - Phone Support - 24/7 (Live rep) ## Category - [Log Analysis Solutions](https://www.capterra.ca/directory/32917/log-analysis/software) ## Related Categories - [Log Analysis Solutions](https://www.capterra.ca/directory/32917/log-analysis/software) - [Log Management Software](https://www.capterra.ca/directory/30856/log-management/software) - [SIEM Software](https://www.capterra.ca/directory/31239/siem/software) ## Alternatives 1. [Logmanager](https://www.capterra.ca/software/1068855/Logmanager) — 5.0/5 (16 reviews) 2. [ManageEngine Firewall Analyzer](https://www.capterra.ca/software/172277/manageengine-firewall-analyzer) — 4.5/5 (241 reviews) 3. [Datadog](https://www.capterra.ca/software/135453/datadog-cloud-monitoring) — 4.6/5 (357 reviews) 4. [Splunk Enterprise](https://www.capterra.ca/software/94317/splunk) — 4.6/5 (259 reviews) 5. [ManageEngine Log360](https://www.capterra.ca/software/175185/log360) — 4.7/5 (26 reviews) ## Reviews ### "Graylog the best syslog" — 5.0/5 > **Fabrizio** | *September 4, 2024* | Computer & Network Security | Recommendation rating: 10.0/10 > > **Pros**: You can choose the free version and have all the features needed to collect and look for logs. There is a huge community, so in case of need you will easily find the answer to your question/problem. The interface is simple and you can create your own dashboard with tables, graphs and counter (you can view your logs and create tables also with graphana, using elasticsearch as data source). You need to add at least an input, it can be for example an UDP one or for windows and linux machine filebeat on port 5044 (via sidecar). You will see your sidecar devices on the Sidecars section. You can create and save queries using lucene language, they will help you to find any potential threat logged. Graylog server runs on a Linux Machine, installation is quite easy, there are lot of tutorials on internet. > > **Cons**: some features are only on enterprise edition, the purge of inactive sidecar sometimes does not work (you have to restart graylog-server service) > > I use Graylog for security and GDPR purposes. Speaking about security, it helps me a lot, I collect logs from firewall, nas, switch, windows (e.g. Domain Controller and Terminal Server) and linux server, especially if they are published on internet. If you have an exchange on premise you should collect the log files under inetpub directory (use the windows filebeat). I can download report in excel format. Updates are frequent. A great product you should try. ----- ### "Graylog the king of syslogs" — 5.0/5 > **Verified Reviewer** | *July 15, 2024* | Computer & Network Security | Recommendation rating: 10.0/10 > > **Pros**: Graylog can be totally free, and you can collect logs from windows and linux systems and from other devices such as firewalls and switches (there are many more). You need a linux machine to install and run graylog server. With Windows and Linux you have to install Sidecar and Filebeat to collect data and configure the agent. You can create many indices and set their retention policies. Once you start collecting logs you can do searches with lucene query, and save your queries. Then you can download the results in .csv format. With Graylog you can create dashboards, set alerts (e.g. via email or via telegram) that help to keep your network safe, remember to set the right path of logs in your Winlogbeat and Filebeat. > > **Cons**: Some installation guides are not really clear. > > Graylog has a clean interface that I like very much. I keep monitored several devices and I created many queries that look for unusual activities. I run and keep updated many Graylog server installations and they work fine. Just remember to se the right number of indices and their rotation to avoid loss of data if disk becomes full. Collecting logs is also useful for GDPR purposes. Among Syslogs i think Graylog is the best one. ----- ### "Graylog Enterprise Log for Business" — 5.0/5 > **Chamroeunrith** | *September 12, 2021* | Nonprofit Organization Management | Recommendation rating: 10.0/10 > > **Pros**: - Graylog is very powerful log, i have search around 50million of record in 3second only, very powerful log because it integrated with elastic search that perform log search very fast. - Telegram alert notification is what i like, i create the rule to let it send notification to telegram so i know what is going on on the network/server log. - enterprise license are free for one year, and make sure your traffic log not hit to 5GB/day. - support various log protocol, nxlog from windows, syslog from linux, and other such as aws. but i use only nxlog and syslog only. > > **Cons**: its perfect already but the dashboard not so nice, not so flexible on the reporting yet. > > prevously we using syslog server to centralize log, and when we have more server and network we can not put all those log into syslog server that store data in mysql, it perform slow search and not report correctly, i have try spend sometime to search and i found graylog, i try to setup a few day until success because its new related to elastic search, but finally i find out and keep using until now, its around 3 years already since i use graylog server to monitor all the network activity, monitoring server with nxlog agent, monitor cisco switch with syslog, linux with syslog, and can monitor the radius authentication log, each time users plug the network or connect wifi log generated and sent to graylog-server, and graylog server create alert message send by telegram to system admin. ----- ### "Great value to cost ratio for a solid log management solution" — 5.0/5 > **Tim** | *November 2, 2020* | Hospitality | Recommendation rating: 10.0/10 > > **Pros**: Very low cost of ownership, particularly if you can get the Community (Free, Open-Source) version to meet your needs. I’ve implemented Graylog at multiple organizations for only the cost of hardware / storage. > > **Cons**: Would love to have more plugins / content packs available in the Graylog Marketplace. With limited hands on a team for a smaller company, there’s often not enough time to write extractors and content packs. > > Graylog has been great to work with. Their sidecar implementations make client configuration and management very easy, and even with the free version, they provide reliable, albeit limited support (I’ve gotten good, live email replies to a couple of questions, versus only allowing you to access forums, etc). ----- ### "Main features of Grylog" — 3.0/5 > **Verified Reviewer** | *April 2, 2020* | Computer Software | Recommendation rating: 10.0/10 > > **Pros**: 1- Understand how different equipment, operating systems, databases, services and processes and different teams work in the organization. 2- Detecting security threats (in-depth analysis to find the source of the threat) 3. Dealing with cybercrime, using logs and traces of intrusion 4. Improve the process of managing applications, servers and services in real-time 5. In-depth and accurate checking of incoming and outgoing traffic at the packet level 6. Identify the relationship and correlation between logs and events 7. Identify any anomalies in different layers of IT the organization 8. Automate the process of detecting and reporting errors and anomalies to relevant teams in the organization 9. Perform normalization and immediate correlations of events and traffic 10. Provide real-time field of view and capture Network Flow data events In close proximity to advanced analytics, the service status is revealed 11.Prioritize alerts 12. Excellent speed and quality 13. Ability to write proprietary Content Pack 14. And hundreds more wonderful possibilities 15............ > > **Cons**: 1-Speed and quality 2-Access to Content Pack 3-Being a user of Friendly 4-Support most softwares and devices 5-Good doc on the main site and internet > > test traffic and log DB (eg. MySQL ...) test all OS Unix/Linux system log and traffic test log and traffic Firewall fortigate and FortiWeb device F5 loadbalancer Docker machine LXC container ......... ----- Page: 1 / 3\ Next: [Next page](https://www.capterra.ca/software/183539/graylog?page=2) ## Links - [View on Capterra](https://www.capterra.ca/software/183539/graylog) ## This page is available in the following languages | Locale | URL | | de | | | de-AT | | | de-CH | | | en | | | en-AE | | | en-AU | | | en-CA | | | en-GB | | | en-IE | | | en-IL | | | en-IN | | | en-NZ | | | en-SG | | | en-ZA | | | es | | | es-AR | | | es-CL | | | es-CO | | | es-CR | | | es-DO | | | es-EC | | | es-MX | | | es-PA | | | es-PE | | | fr | | | fr-BE | | | fr-CA | | | fr-LU | | | it | | | nl | | | nl-BE | | | pt | | | pt-PT | | ----- ## Structured Data