diff --git a/pkgs/tools/misc/graylog/default.nix b/pkgs/tools/misc/graylog/default.nix
index 11cbd87024f..5c868ae5e2f 100644
--- a/pkgs/tools/misc/graylog/default.nix
+++ b/pkgs/tools/misc/graylog/default.nix
@@ -1,12 +1,12 @@
 { stdenv, fetchurl }:
 
 stdenv.mkDerivation rec {
-  version = "2.3.2";
+  version = "2.4.0";
   name = "graylog-${version}";
 
   src = fetchurl {
     url = "https://packages.graylog2.org/releases/graylog/graylog-${version}.tgz";
-    sha256 = "0mzrhzbyblspia3qp85hvv5kdc7v3aird02q2pxrxbwca6wjlxcs";
+    sha256 = "12ipp1bji0ss0d20dpqx8d6x3p3h38qdfdy98qy37mjy0fi22vpq";
   };
 
   dontBuild = true;
diff --git a/pkgs/tools/misc/graylog/plugins.nix b/pkgs/tools/misc/graylog/plugins.nix
index dfaefc2b2e2..21a624c9d25 100644
--- a/pkgs/tools/misc/graylog/plugins.nix
+++ b/pkgs/tools/misc/graylog/plugins.nix
@@ -139,19 +139,6 @@ in {
       description = "Graylog input plugin that reads MongoDB profiler data";
     };
   };
-  netflow = glPlugin rec {
-    name = "graylog-netflow-${version}";
-    pluginName = "graylog-plugin-netflow";
-    version = "0.1.1";
-    src = fetchurl {
-      url = "https://github.com/Graylog2/${pluginName}/releases/download/${version}/${pluginName}-${version}.jar";
-      sha256 = "1pdv12f9dca1rxf62ds51n79cjhkkyj0gjny8kj1cq64vlayc9x9";
-    };
-    meta = {
-      homepage = https://github.com/Graylog2/graylog-plugin-netflow;
-      description = "Graylog NetFlow plugin";
-    };
-  };
   pagerduty = glPlugin rec {
     name = "graylog-pagerduty-${version}";
     pluginName = "graylog-plugin-pagerduty";
@@ -204,19 +191,6 @@ in {
       description = "Correlate proton density to the response time of your app and the ion temperature to your exception rate.";
     };
   };
-  threatintel = glPlugin rec {
-    name = "graylog-threatintel-${version}";
-    pluginName = "graylog-plugin-threatintel";
-    version = "0.10.0";
-    src = fetchurl {
-      url = "https://github.com/Graylog2/${pluginName}/releases/download/${version}/${pluginName}-${version}.jar";
-      sha256 = "0clg0vy8aipw122rfqww1lnjriazlnnh77pqiy5vnmv6ycjw0y4i";
-    };
-    meta = {
-      homepage = https://github.com/Graylog2/graylog-plugin-threatintel;
-      description = "Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases";
-    };
-  };
   twiliosms = glPlugin rec {
     name = "graylog-twiliosms-${version}";
     pluginName = "graylog-plugin-twiliosms";