The best open source alternative to Graylog is Wazuh. If that doesn't suit you, our users have ranked more than 50 alternatives to Graylog and many of them is open source so hopefully you can find a suitable replacement. Other interesting open source alternatives to Graylog are Kibana, HyperDX, Logstash and Grafana Loki.
Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments.
Open-source interface for real-time visualization, search, monitoring logs or metrics, anomaly detection, and natural language queries in Elasticsearch, supporting machine learning, automated alerting, threat detection, and integration with tools like Slack and ServiceNow.
Netherlands
EU
Logstash is an open source, server-side data processing pipeline that ingests data from a multitude of sources simultaneously, transforms it, and then sends it to your favorite "stash.".
NetherlandsEU
Grafana Loki is a horizontally-scalable, highly-available, multi-tenant log aggregation system inspired by Prometheus. It is designed to be very cost effective and easy to operate. It does not index the contents of the logs, but rather a set of labels for each log stream.
SwedenEU
Fluentd is a fully free and open-source log management tool that simplifies your data collection and storage pipeline. It eliminates the need to maintain a set of ad-hoc scripts.
Unify your cloud-native monitoring with zero-code eBPF, advanced profiling, and 10x storage efficiency.
China
Open Web Analytics - Web Analytics – Open Source Web Analytics Framework
The Open Web Analytics (OWA) framework provides a generic set of PHP and HTTP APIs that application developers can use to integrate web analytics into any application. The Framework also has built-in suppor.
Norway
Matano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data from various sources, store and query them in a data lake, and create Python detections as code for realtime alerting.
Goxe is a high-performance log reduction tool written in Go, designed to reduce noise in observability pipelines. It ingests logs via Syslog/UDP, normalizes and filters them, and aggregates identical or repetitive messages into a single-line format with occurrence counts.
Venezuela![This screenshot shows Goxe's terminal output. It displays a 'Partial Report' where repetitive log messages (like update versions and errors) are grouped with their occurrence count (e.g., [74961] repetitions). At the bottom, it highlights the tool's high efficiency, showing a memory footprint of less than 1MB while processing large volumes of data.](https://img.alternativeto.net/s/309x197/jpeg/goxe_881513_full.png)
Tracks event timelines, grouped exception alerts, log searches, SQL query and job performance, third-party integrations, notifications, cache patterns, and scheduled tasks across any Laravel deployment, offering comprehensive health insights and instant setup.
United States
Open source observability platform. SigNoz helps developers find issues in their deployed applications & solve them quickly.
United States
![This screenshot shows Goxe's terminal output. It displays a 'Partial Report' where repetitive log messages (like update versions and errors) are grouped with their occurrence count (e.g., [74961] repetitions). At the bottom, it highlights the tool's high efficiency, showing a memory footprint of less than 1MB while processing large volumes of data.](https://img.alternativeto.net/s/618x394/avif/goxe_881513_full.png)
