Graylog2 / Graylog2/graylog2-server

Graylog schema - follow OSSEM?

Open
#9,803 0 comments 0 reactions 1 assignee Claimed by @r00tnix View on GitHub
triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

The [Graylog CIM](https://schema.graylog.org/en/stable/index.html) is a relatively new feature in Graylog. It is not the first such attempt in the community, including [ECS](https://www.elastic.co/guide/en/ecs/current/index.html), [Splunk CIM](https://docs.splunk.com/Documentation/CIM/4.18.0/User/Overview), and other [competing standards](https://xkcd.com/927/). One example is [OSSEM](https://ossemproject.com/intro.html), which is also relatively new, but has the advantage over the others to not be supported by one of Graylog's concurrents. It might be interesting for everyone that Graylog tries to integrate and improve the OSSEM schema instead of spending time and resources developing from scratch something that in the end will be very similar.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.