TR

Graylog Workshop

Course Audience

GR201
3 DAYS

System administrators aiming to centralize the logs generated by their servers, services, and network devices, utilize them for security audits, and provide access to authorized personnel within the organization via a web interface.

Course Subjects

  • Architecture and Use Cases of Graylog
  • Graylog Installation
  • Types and Configurations of Input (log collection)
  • Sending logs from different sources
  • Stream Configurations
  • Authorization
  • Search and Extended Search
  • Log parsing with tools like Extractor, content packs, Logstash, etc.
  • Retention and Rotation
  • Beats (Auditbeat, Winlogbeat, etc.)
  • Generating Alerts (Alarms)
  • Personalization with Dashboards (Quick Access Panel)
  • Cluster Architecture
  • Backup
  • Version Upgrade