Baking a SIEM: A Recipe for Graylog Open to Security and Beyond

Baking a SIEM: A Recipe for Graylog Open to Security and Beyond

Dec 4, 2024

Aspire Bakeries' Graylog journey began in mid-2017 when we realized the current method of log review/collection on each device wasn’t working for us in Operations and we needed better way of working. Over the years we have grown our Graylog implementation from a single Graylog Open 2.0 VM for Operations Teams to a multi-node cluster handling 100MM+ messages per day and the center of our SOC.

We will explore how Aspire has handled new data, scaling, and security challenges using Graylog. From using pipelines to enrich and prevent unneeded data ingestion, to using Assets in Graylog Security to provide near real-time tracking, we will share stories and lessons learned along the way.

  • Key Takeaways** Scaling and Optimization - Learn how Aspire Bakeries successfully scaled their Graylog implementation to handle massive data loads while optimizing performance and security. Practical Insights - Discover practical strategies for enriching data, preventing unnecessary ingestion, and using Graylog Security Assets for real-time tracking, all based on real-world experiences.

Checkout Documentation
https://go2docs.graylog.org/current/home.htm

Direct Downloads Page
https://graylog.org/downloads

Subscribe to Our Blog
https://graylog.org/blog/

Join the Community
https://community.graylog.com/company/graylog

Twitter: https://twitter.com/graylog2
Facebook: https://www.facebook.com/graylog/
LinkedIn: https://www.linkedin.com/company/graylog
Reddit: https://www.reddit.com/r/graylog/
Mastodon: https://infosec.exchange/@Graylog
Bluesky: https://bsky.app/profile/graylog.bsky.social

Want to contact us?
https://graylog.org/contact-us/