Graylog Illuminate Documentation
Select your version of Illuminate
Explore Illuminate
What's New?
Update Illuminate
Detect Anomalies
Sigma Rules Content
- Linux System User Activity Sigma Rules Content Pack
- Microsoft Windows Security Sigma Rules Content Pack
- Microsoft Windows Security User Activity Sigma Rules Content Pack
- Webserver Sigma Rules Content Pack
- Windows Detection Chains II Sigma Rules Content Pack
- Windows Detection Chains Sigma Rules Content Pack
Email Routing & Security
Firewalls
- Checkpoint Firewall Security Content Pack
- pfSense Firewall Security Content Pack
- Fortinet FortiGate Content Pack
- FortiWeb Content Pack
- Juniper SRX Content Pack
- Palo Alto 11 Content Pack
- Palo Alto 9.1x Content Pack
- SonicWall NGFW Content Pack
- Sophos Central Content Pack
- Sophos Firewall Content Pack
- Stormshield Content Pack
- WatchGuard Firebox Content Pack
Identity and Access Management
Network Monitoring and Management
- Linux System Logs Content Pack
- AWS VPC via Kinesis Content Pack
- BIND DNS Content Pack
- Cloudflare Content Pack
- F5 BIG-IP Content Pack
- HAProxy LoadBalancer Content Pack
- Linux Auditbeat Content Pack
- NetFlow Content Pack
- Packetbeat Content Pack
- ProFTPD Server Content Pack
- Snort 3 IDS Content Pack
- Ubiquiti UniFi Content Pack
- Zeek Content Pack
Amazon/AWS Content
Cisco Content
Google Content
Microsoft Content
- Microsoft Defender for Endpoint Content Pack
- Microsoft DHCP Content Pack
- Microsoft IIS Content Pack
- Microsoft Office 365 Content Pack
- Microsoft PowerShell Content Pack
- Microsoft Sysmon Content Pack
- Microsoft Windows AppLocker Content Pack
- Microsoft Windows DNS Server Content Pack
- Microsoft Windows Security Content Pack
Symantec (Broadcom) Content
Graylog Information Model (GIM) Schema
