Please note that Graylog Illuminate documentation has been moved to the new Illuminate knowledge base. This change has been made to enhance user experience and ensure easier navigation throughout our documentation site.

During this transition, we have made efforts to maintain the integrity of the information on our platform. To access specific Illuminate content, see the list below:

• What is Graylog Illuminate?

  • Illuminate Processing Management

• Installing Graylog Illuminate

  • Installing Graylog Illuminate Manually

• Upgrading Graylog Illuminate

  • Upgrading Graylog Illuminate Manually

• Security Content Packs

  • Apache Web Server Content Pack

  • BIND DNS Content Pack

  • Carbon Black / CB Defense Content Pack

  • Checkpoint Next Generation Firewall Content Pack

  • Cisco ASA/Firepower Content Pack

  • Cisco Meraki Content Pack

  • Crowdstrike Falcon EDR Content Pack

  • Fortigate Content Pack

  • Juniper SRX Series Firewalls Content Pack

  • Linux Auditbeat Content Pack

  • Microsoft Defender for Endpoint Content Pack

  • Microsoft DHCP Content Pack

  • NGINX Content Pack

  • Office 365 Content Pack

  • Okta Content Pack

  • Palo Alto Content Pack

  • pfSense Firewall Content Pack

  • SFOS 19.5 Content Pack

  • Snort IDS Processing Content Pack

  • SonicWall NGFW Content Pack

  • Stormshield Content Pack

  • Symantec Endpoint Content Pack

  • Symantec ProxySG Content Pack

  • Sysmon Content Pack

  • Ubiquiti UniFi Content Pack

  • Watchguard Firebox Content Pack

  • Windows Event Logs Content Pack

  • Windows PowerShell Content Pack

  • Zeek Content Pack