logback-gelf VS graylog

I browsed to https://mvnrepository.com/artifact/de.siegmar/logback-gelf to find an updated version (4.0.2) and when I go to the linked github and view the changelog (https://github.com/osiegmar/logback-gelf/blob/master/CHANGELOG.md) of that version it clearly indicates that it upgraded logback components to 1.2.9. Actually it reads "Update dependency to logback 1.2.9" and the linked issue clearly indicates a fix to the CVE raised by OWASP dependency check.

logback-gelf

Graylog: An open source log management platform that provides real-time visibility into security events and facilitates incident response.

https://www.graylog.org/ but might be overkill.

Looks like the fix for this went in on March 28 and this should have been included in the April bugfix release 5.0.6

Sure! I use the Open Source of Graylog to search and build reports from the data. It sits on its own Droplet

Check out Graylog - https://www.graylog.org/ Graylog stores everything in elasticssearch, so you gan also use it as a datasource in Grafana.

Graylog

I use this to monitor my reverse proxy (SWAG) and fail2ban logs in conjunction. It's not as streamlined as GoAccess, GrayLog, Grafana, etc . . . but it is very personal. I divide all my connections into three buckets: Home, Outside, and Known Devices; and fail2ban statistics are layered against the all connections.

Graylog is an open-source centralized log management and analytics tool. It collects, enhances, correlates, searches, and visualizes all your log data in one location to uncover patterns and trends for application and IT infrastructure.