Best Graylog MCP Servers
Graylog is an open-source log management platform that collects, indexes, and analyzes log data from various sources. It helps organizations monitor their systems, troubleshoot issues, and gain insights from their log data with powerful search capabilities and visualization tools.
Why this server?
Provides direct access to Graylog logs with tools for searching, aggregating, analyzing, clustering, and managing logs, events, saved searches, and connections across multiple Graylog instances.
AlicenseAqualityDmaintenanceAn MCP server that gives AI assistants direct access to your Graylog logs -- search, aggregate, analyze, and cluster log data through natural language.2315 npmMITWhy this server?
Provides tools for fetching messages from Graylog instances, allowing search queries, time ranges, field selection, and multi-instance support.
AlicenseAqualityCmaintenanceEnables querying Graylog log management system for messages using natural language, supporting multiple instances and flexible search parameters.129 npm11MITWhy this server?
Read-only integration with a Graylog (4.x–7.x) server for log investigation and incident analysis. Provides tools to search and count logs, follow a correlation/trace id across services, get messages and surrounding context, group errors with exact counts, build log histograms and top-value rankings, compare two time periods, list streams and fields, run configured query presets, and perform root cause analysis that ranks likely origins by comparing services' errors, traffic and latency against a baseline, pinning first-error timestamps, detecting deploys/restarts and inferring a service call graph from traces. Sensitive data (credentials, tokens, emails, card numbers, etc.) is masked before logs are returned.
AlicenseBqualityBmaintenanceA read-only Model Context Protocol server that lets an LLM search Graylog logs, trace a request across services, compute exact error counts and groupings, detect deploys, and rank root-cause hypotheses across Graylog 4.x–7.x. It masks sensitive fields before any log line leaves the machine and keeps site-specific settings in configuration.17MITWhy this server?
Provides tools for querying and diagnosing logs from Graylog, a centralized log management system. Allows searching messages, retrieving system info, and performing code log diagnostics.
AlicenseAqualityDmaintenanceProvides a standardized MCP interface for querying Graylog logs, enabling AI agents to search, diagnose, and correlate runtime logs with code via configurable profiles.5MITWhy this server?
Provides tools for interacting with Graylog, enabling log searching across streams, aggregating matches by field, discovering streams and fields, and fetching full log messages.
AlicenseAqualityCmaintenanceMinimal MCP server that integrates with Graylog, enabling agents to search, analyze, and inspect log messages across streams, discover fields and streams, and query multiple Graylog instances.528 npm2MITWhy this server?
Enables integration with Graylog to query and analyze log data, providing tools for stream management, time-based filtering, and log statistics or aggregations.
AlicenseDqualityAmaintenanceIntegrates AI assistants with Graylog to query and analyze log data using Elasticsearch syntax and stream-specific filtering. It enables users to perform advanced searches, retrieve log statistics, and manage Graylog streams through natural language.912MITWhy this server?
Provides tools for centralized log search with time filters and streaming, including searching logs, listing streams, and system overview.
FlicenseBqualityDmaintenanceAsynchronous MCP server for unified multi-platform network infrastructure management, providing 97 tools across 10 connectors including SSH, MikroTik, Palo Alto, Aruba, Graylog, LibreNMS, Cisco APIC/NDFC, and Panorama.9724-Why this server?
Sends structured logs to Graylog via GELF for centralized log management and monitoring.
AlicenseNot gradedqualityAmaintenanceEnables read-only semantic search over local folders of markdown, text, and optionally other document formats via a local vector store, without ever mutating the source files. It also watches each configured source for changes and auto-reindexes so search results stay fresh.MITWhy this server?
Enables querying and searching Graylog logs using universal search with relative or absolute time windows, including count-only variants for lightweight analytics of log data and error patterns.
AlicenseNot gradedqualityDmaintenanceEnables AI assistants to query and analyze logs from Graylog instances using universal search with relative or absolute time windows, supporting both full result retrieval and lightweight count-only queries.14 npm1MIT