Graylog Illuminate Documentation
Select your version of Illuminate
This site includes information for Graylog Illuminate.
Return to Graylog core documentation for information about using Graylog.
Explore Illuminate
What's New?
Update Illuminate
Detect Anomalies
Sigma Rules Content
- Linux System User Activity Sigma Rules Content Pack
- Microsoft Windows Security Sigma Rules Content Pack
- Microsoft Windows Security User Activity Sigma Rules Content Pack
- Webserver Sigma Rules Content Pack
- Windows Detection Chains II Sigma Rules Content Pack
- Windows Detection Chains Sigma Rules Content Pack
Email Routing & Security
Firewalls
- Checkpoint Firewall Security Content Pack
- pfSense Firewall Security Content Pack
- Fortinet FortiGate Content Pack
- FortiWeb Content Pack
- Juniper SRX Content Pack
- Palo Alto 11 Content Pack
- Palo Alto 9.1x Content Pack
- SonicWall NGFW Content Pack
- Sophos Central Content Pack
- Sophos Firewall Content Pack
- Stormshield Content Pack
- WatchGuard Firebox Content Pack
Identity and Access Management
Network Monitoring and Management
- Linux System Logs Content Pack
- AWS VPC via Kinesis Content Pack
- BIND DNS Content Pack
- Cloudflare Content Pack
- F5 BIG-IP Content Pack
- HAProxy LoadBalancer Content Pack
- Linux Auditbeat Content Pack
- NetFlow Content Pack
- Packetbeat Content Pack
- ProFTPD Server Content Pack
- Snort 3 IDS Content Pack
- Ubiquiti UniFi Content Pack
- Zeek Content Pack
Amazon/AWS Content
Cisco Content
Google Content
Microsoft Content
- Microsoft Defender for Endpoint Content Pack
- Microsoft DHCP Content Pack
- Microsoft IIS Content Pack
- Microsoft Office 365 Content Pack
- Microsoft PowerShell Content Pack
- Microsoft Sysmon Content Pack
- Microsoft Windows AppLocker Content Pack
- Microsoft Windows DNS Server Content Pack
- Microsoft Windows Security Content Pack
Symantec (Broadcom) Content
Graylog Information Model (GIM) Schema
