graylog
Apache Log4j 2
| graylog | Apache Log4j 2 | |
|---|---|---|
| 46 | 108 | |
| 7,128 | 3,276 | |
| 1.6% | 0.5% | |
| 10.0 | 9.9 | |
| about 24 hours ago | about 23 hours ago | |
| Java | Java | |
| GNU General Public License v3.0 or later | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
graylog
-
graylog VS openobserve - a user suggested alternative
2 projects | 7 Sep 2023
-
DevOps and Security: DevSecOps
Graylog: An open source log management platform that provides real-time visibility into security events and facilitates incident response.
-
Any simple web UI for viewing syslogs?
https://www.graylog.org/ but might be overkill.
-
why does GL 5 want write permisson to data adapter CSV files
Looks like the fix for this went in on March 28 and this should have been included in the April bugfix release 5.0.6
-
Anyone using DigitalOcean Volume as MySQL data directory for DBs with a few hundred GBs in size?
Sure! I use the Open Source of Graylog to search and build reports from the data. It sits on its own Droplet
-
Good self-hosted logging server?
Check out Graylog - https://www.graylog.org/ Graylog stores everything in elasticssearch, so you gan also use it as a datasource in Grafana.
- Best Open Source Software/Application/Tools
-
How do you debug your pipelines?
Graylog
-
NGINX / fail2ban Log Reader - for YOU
I use this to monitor my reverse proxy (SWAG) and fail2ban logs in conjunction. It's not as streamlined as GoAccess, GrayLog, Grafana, etc . . . but it is very personal. I divide all my connections into three buckets: Home, Outside, and Known Devices; and fail2ban statistics are layered against the all connections.
-
Top 11 Splunk Alternatives that you may consider in 2023
Graylog is an open-source centralized log management and analytics tool. It collects, enhances, correlates, searches, and visualizes all your log data in one location to uncover patterns and trends for application and IT infrastructure.
Apache Log4j 2
-
Hackers exploited Windows 0-day for 6 months after Microsoft knew of it
I don't think that's a good example. While Apache devs are volunteers and Microsoft devs are employees, they were criticized for their slow response time and seeming lack of urgency until it was far too late.
https://github.com/apache/logging-log4j2/pull/608#issuecomme...
- Create an alternative async logger implementation using JCTools
- Log4j requesting feedback on which modules/features to drop
- The Unsung Heroes of Open Source: The Dedicated Maintainers Behind Lesser-Known Projects
-
Studying Log4Shell
The official website. The vulnerability was introduced in 2.0-beta7 which was released in 2013.
-
The Dedicated Maintainers Behind Lesser-Known Open Source Projects
However, there are many open source projects that are widely used but not well-known, including cURL, ImageMagick, MyCLI, Homebrew, Apache Log4j, and OpenSSL. This article will take a closer look at these unsung heroes of the open source world. I do not want to give them a business model or financial advice in this article. This largely depends on the author's personal experience and values. I just want to raise more awareness about these open source projects.
-
Apache POI Setup Logging Error
What you need is log4j-core, what you downloaded is some kind of connector between log4j and JUL. Tbh I don't know what JUL is, but that's not important. You can get log4j-core on from the official website - https://logging.apache.org/log4j/2.x/ or in maven repo. In case you're not using maven, I highly, highly recommend you using it for managing your dependencies.
-
Log4Shell Still Has Sting in the Tail
> When it was first revealed in early December 2021, the Log4Shell bug was described as one of the most severe security vulnerabilities ever.
> The Apache Software Foundation, which maintains the open-source tool, quickly released a patch...
Apache horribly mismanaged this and did not release a patch until it was already widely known and being exploited in the wild. They also messed up and had to release several subsequent patches to actually fix the vulnerability.
Remember: this vulnerability was disclosed to them in November.
https://github.com/apache/logging-log4j2/pull/608#issuecomme...
-
The US Cybersecurity and Infrastructure Agency open-sourced a new tool named Scuba
Think back to the Log4J event, were you affected? (https://github.com/apache/logging-log4j2)
- In One Minute : log4j2
What are some alternatives?
OpenSearch - 🔎 Open source distributed and RESTful search engine.
Logback - The reliable, generic, fast and flexible logging framework for Java.
Wazuh - Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
reload4j - reload4j is a drop-in replacement for log4j 1.2.17
graylog-fortigate-cef - A Graylog content pack containing a stream and dashboards for Fortinet Fortigate CEF logs
tinylog - tinylog is a lightweight logging framework for Java, Kotlin, Scala, and Android
vector - A high-performance observability data pipeline.
Logstash - Logstash - transport and process your logs, events, or other data
OpenSearch-Dashboards - 📊 Open source visualization dashboards for OpenSearch.
SLF4J - Simple Logging Facade for Java
syslog-ng - syslog-ng is an enhanced log daemon, supporting a wide range of input and output methods: syslog, unstructured text, queueing, SQL & NoSQL.
kibana - Your window into the Elastic Stack