A Graylog Forwarder Alternative
Discover a superior log shipper for Graylog
NXLog Enterprise Edition
- Integrates with any SIEM, including Graylog Open Source and Graylog Enterprise
- Outstanding log collection capabilities from Windows, Linux, macOS, and more
- Fast, secure, and reliable
From its inception, NXLog was built as an efficient, multi-platform log collector. Check out the reasons we believe our feature-packed solution is an excellent alternative to the Graylog Forwarder.
One agent for all your log collection needs
Graylog Forwarder can only act as a relay, receiving and forwarding logs to Graylog. You then need to install different log collectors according to your log sources. On the other hand, whether you want to forward logs to Graylog directly from the source or a relay server, NXLog can do it all. What's more, NXLog speaks GELF, so it can output any type of log in a format that Graylog understands.
An efficient, fail-safe log forwarding solution
The NXLog agent is lightweight and, unlike the Graylog Forwarder, does not require Java. Additionally, with support for load balancing, high availability, and several caching mechanisms, you can have your mind at rest that your logs are safe in case of system failure or network outage.
Quality logs at a reduced cost
NXLog provides unmatched filtering and parsing capabilities, and allows you to rewrite and enrich logs.
For example, trim unnecessary event data or normalize your logs to a common event schema. Filtering logs at the source means you minimize the volume of log data ingested by Graylog, reducing operational costs for Graylog Enterprise, which is priced by log data volume ingestion.
Do not get vendor-locked
IT environments are continuously evolving. So what happens when you need to send logs to another platform or start using a different SIEM solution? Unlike Graylog Forwarder, NXLog is platform-independent. It can integrate with any SIEM and multicast logs in different formats. For example, forward logs to Graylog in GELF while simultaneously archiving raw events to low-cost storage.
Reliability and efficiency
- A lightweight agent with a low memory footprint
- Blazingly fast and scalable, with enterprise-grade EPS rate
- Failover support, message buffering, and memory and disk-based queues
Compression and security
- Encrypted data transfer with TLS/SSL
- Compression over the wire to reduce network bandwidth
- Protection of data at rest
ICS/SCADA support
- Dedicated module for capturing network traffic
- Specialized parsing for ICS protocols, including MODBUS, PROFINET, and BACNET
- Supports top vendors such as Schneider Electric, Siemens, and Yokogawa
