Grafana is a data visualization tool developed by Grafana Labs in New York. It is available open source, managed (Grafana Cloud), or via an enterprise edition with enhanced features. Grafana has pluggable data source model and comes bundled with support for popular time series databases like Graphite. It also has built-in support for cloud monitoring vendors like Amazon Cloudwatch, Microsoft Azure and SQL databases like MySQL. Grafana can combine data from many places into a single dashboard.
$0
Graylog
Score 8.4 out of 10
N/A
Graylog, headquartered in Houston, offers their eponymous platform for centralized log management that helps users find meaning in data faster so as to take action immediately. Graylog is available via Enterprise and Cloud plans, but also has a Small Business Plan, and an Open (free) plan with limited features.
N/A
Pricing
Grafana
Graylog
Editions & Modules
Grafana Cloud - Pro
$8
per month up to 1 active user
Grafana Cloud - Free
Free
10k metrics + 50GB logs + 50GB traces up to 3 active users
Grafana is a one stop solution for all application monitoring needs. In our organisation, we use nodeJs. We run it using pm2. Since we didn't use Grafana it was hard for us to know if an app has stopped working unless we find it ourselves because our other app components were failing, or someone called us up and told about the situation. We were already using Grafana for monitoring our Ubuntu servers, but we hadn't had set it up for our app monitoring. Somehow we decided to monitor our nodeJs app with Grafana. It's a really good decision we made. We used Grafana nodeJs module "prom-client" for our node app which brought us relief from app failing situations. Since we have implemented Grafana for our Node app, it has helped us to monitor every health aspect of our node app. Now we have set up alerts based on heap-memory, so when heap memory goes beyond a set threshold we get notified and take the right steps ultimately saving our app from crashing and of course from losing business and reputation.
For small companies, Graylog is the best solution possible. It's easy to configure and "just works." Above everything else, it's free. The only thing I hold against it is the fact that it's Linux-based. [This] makes sense because Elasticsearch is Linux-based. But Linux adds a layer of complexity that we don't need for something basic as a logging server. I'm pretty sure that we would have had a logging server years earlier if I had to convince quite a few decision-making people to go ahead with it anyway.
Graylog does a great job of its core function: log aggregation, retention, and searching.
Graylog has a very flexible configuration. The backend for storage is Elasticsearch and MongoDB is used to store the configuration. You have to option to make your configuration as simple as possible by storing everything on one box, or you can scale everything out horizontally by using a cluster of Elasticsearch nodes and MongoDB servers with several Graylog servers pointed to all the necessary nodes.
Graylog does a good job of abstracting away a fair portion of Elasticsearch index management (sharding, creation, deletion, rotation, etc).
Community support does not give simple straightforward answers; simply search up Graylog Issues and look at some of the responses on the forums. The documentation is your only hope if you are on the free version, as you can NOT purchase only support. The few times I have worked with Graylog Enterprise support they were great though.
Grafana has a direct plugin to Icinga monitoring solution and allowed for easy configuration for us. At the time of implementation, other services did not have such an integration. As we already had a very customized and heavily introduced monitoring solution in place, we needed settings that could plug into the system quickly and efficiently. This was the case with Grafana and allowed us to have all the integrations we needed with services such as Icinga
In terms of log aggregation, the free product fully stacks up with the competitors listed. Full control over the data ingests for flexible configuration. Graylog even better on that front than AlienVault USM because you cannot configure the variable mapping. We haven't used the threat exchange stuff or correlation. But with regex searches, we have created function dashboards that show threat theater pictures of our network based on logs from our firewall.
Graylog is just less expensive than some other options which meant it fit into our budget otherwise we might not be able to justify a higher cost.
Being able to track issues that we normally couldn't track using other tools is a bonus to help us know of any issues we have and can fix before an outage or failure that could potentially cost money.
We have had to spend more time than I would like to understand and customize Graylog which has taken time away from other tasks and projects.