WatchGuard Firebox Firewall Data in Graylog: Your Firebox records every allowed and denied connection, user logon, IPS detection, and configuration change. The Graylog Illuminate content pack parses that Fireware syslog using message IDs and maps it to GIM. https://graylog.org/post/watchguard-firebox-firewall-data-in-graylog/