Graylog Illuminate Documentation
Select your version of Illuminate
This site includes information for Graylog Illuminate.
Return to Graylog core documentation for information about using Graylog.
Explore Illuminate
What's New?
Update Illuminate
Detect Anomalies
Sigma Rules Content
- Linux System User Activity Sigma Rules Content Pack
- Microsoft Windows Security Sigma Rules Content Pack
- Microsoft Windows Security User Activity Sigma Rules Content Pack
- Webserver Sigma Rules Content Pack
- Windows Detection Chains II Sigma Rules Content Pack
- Windows Detection Chains Sigma Rules Content Pack
Email Routing & Security
Firewalls
- Check Point Firewall Content Pack
- FortiWeb Content Pack
- Juniper SRX Content Pack
- Palo Alto 11 Content Pack
- Palo Alto 9.x Content Pack
- pfSense Firewall Content Pack
- SonicWall NGFW Content Pack
- Sophos Central Content Pack
- Sophos Firewall Content Pack
- Stormshield Firewall Content Pack
- WatchGuard Firebox Content Pack
Identity and Access Management
Network Monitoring and Management
- BIND DNS Content Pack
- Cloudflare Content Pack
- Core DNS Processing Content Pack
- F5 BIG-IP Content Pack
- HAProxy LoadBalancer Content Pack
- Linux Auditbeat Content Pack
- Linux System Content Pack
- NetFlow Content Pack
- Packetbeat Content Pack
- PostgreSQL Content Pack
- ProFTPD Server Content Pack
- Snort 3 IDS Content Pack
- Ubiquiti UniFi Content Pack
- Zeek Content Pack
Amazon/AWS Content
Cisco Content
Google Content
Microsoft Content
- Microsoft 365 Content Pack
- Microsoft AppLocker Content Pack
- Microsoft Defender Antivirus Content Pack
- Microsoft Defender for Endpoint Content Pack
- Microsoft DHCP Content Pack
- Microsoft IIS Content Pack
- Microsoft Sysmon Content Pack
- Microsoft Windows DNS Server Content Pack
- Microsoft Windows Security Content Pack
Symantec (Broadcom) Content
Graylog Information Model (GIM) Schema
