Currently, I have Graylog deployed, with all VM’s. hosts and available network device logs forwarded to the Graylog server. All sources are ingested into their own stream, and are searched for specified events. Once an even is triggered, an alert is sent to Discord to alert me.