The following content is part of the Graylog 6.3 documentation. If you are using another version of Graylog, please switch to your version.

We strongly recommend all users currently running Graylog versions 6.2.0–6.2.3 upgrade immediately to the latest secure version to resolve a high-severity privilege escalation vulnerability. See Upgrade Graylog for detailed instructions on upgrading your Graylog instance.

Anomaly Detectors

The following article exclusively pertains to a Graylog Security feature or functionality. Graylog Security is a part of the Graylog centralized log management platform and requires a separate license. Contact the Graylog Sales team for more information on this product.

Hint: The following article has been moved to the official Illuminate documentation. See below for details.

For a full list of all available detectors included in the Graylog Anomaly Detection tool, see the related Illuminate documentation.

For a complete index of all the common message fields populated in each event log message generated by Anomaly Detection, see the corresponding guide.