Graylog allows to:

• store logs produced by the Drupal websites in a central repository
• have better ways to query logs from one or multiple Drupal sites
• reduce the size of Drupal databases

The Lucene query mechanism and the visual representations in Graylog will help to improve the website performance, debug the implemented code and identify attacks or security incidents, both in production and acceptance environments. Centralised logging simplifies log analysis and correlation tasks and provides a secure storage area for log data.

Configuration and access to Graylog

To configure Graylog on their websites, developers need to install the drupal/monolog module (see how to install it on this page)­­. As announced on 1 June, drupal/monolog becomes mandatory on 17 June so all Drupal websites need to install it in order to proceed with deployments.

To access Graylog, developers need to make a request to the DROPSEC Jira board to have at least read permissions in the Github repository associated with the project, as Graylog login uses Github authentication.

For more information, you can read the Graylog documentation.­­

Watch the recording of the online Graylog demo session on 28 June.