PSA: Graylog now has built-in support for OPNsense log parsing

[julsssark]

The latest version of Graylog now includes support for OPNsense log parsing. No need to maintain custom code for parsing and best of all it is available in the Open community version: https://go2docs.graylog.org/illuminate-current/what_is_illuminate/graylog_illuminate.html

The only downside I've found is that it is labeled as "pfsense"  :)

[_tribal_]

Good news 8)

[Rolfieo]

The latest version of Graylog now includes support for OPNsense log parsing. No need to maintain custom code for parsing and best of all it is available in the Open community version: https://go2docs.graylog.org/illuminate-current/what_is_illuminate/graylog_illuminate.html

The only downside I've found is that it is labeled as "pfsense"  :)

are you sure its avaiable in the opensource version of graylog? Was what I can find, you need for illuminate the Enterprise version of Graylog.

Requirement(s)
Supported versions include Sense CE edition 2.6 and OPNsense 23.1.
Graylog server with a valid Enterprise license running Graylog 5.0.3+.

[julsssark]

See the link from my original post and note: Hint: Graylog Open users must first upgrade their Graylog 6.1+ instance to include the Enterprise plugin before being able to install the Illuminate content hub.