Overview

Product video
Graylog Security: Native anomaly detectors surface credential compromise and data exfiltration that rules miss. Investigations build automatically from asset risk thresholds. Security Core delivers 68 pre-built alerts and 7 dashboards across 7 threat domains, so teams start detecting on day one. No SOAR required.
Graylog Enterprise: Full fidelity into AWS activity without full log ingestion or added licensing costs. Native Amazon Security Lake integration with preview, selective retrieval, and filtered input keeps IT and DevOps teams in control of what they collect and what they pay for. Dynamic shard sizing eliminates manual tuning.
Why Teams Choose Graylog: One platform for SIEM and log management. Predictable pricing with no charge for standby data in the built-in data lake. Full feature parity on AWS or on-premises. Open-source foundation with REST API included.
Highlights
- Reduce Mean-Time-to-Detect (MTTD) and Mean-Time-to-Respond (MTTR) with faster threat detection, automated investigation workflows, and AI-assisted reporting that keeps security and IT teams focused on real issues.
- Search and filter terabytes of log data in milliseconds for faster troubleshooting and incident response.
- Collect AWS logs from CloudTrail, CloudWatch, VPC Flow Logs, and Security Hub with full fidelity and no full-ingestion requirement.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide

Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/12 months |
|---|---|---|
Graylog Security Unit | Graylog Security | $0.001 |
Graylog Operations Unit | Graylog Operations | $0.001 |
Vendor refund policy
As defined in EULA
Custom pricing options
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
The mission of Graylog Support is to build competence, capability, and confidence in Graylog within our broad base of Customers and Partners. Your successful adoption and acceleration of Graylog as a solution within your business is a fundamental driver behind what we do and how we do it. Experience our first-class support at https://www.graylog.org/technical-support/ .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.