# Graylog

Follow the steps below to configure a service so as to extract its related alert data from Graylog.

Squadcast will then process this information to create incidents for this service as per your preferences.

### Using Graylog as an Alert Source

1. Navigate to **Services** -> **Service Overview** -> select or search for your Service. Expand the accordion -> In the Alert Sources section, click **Add**.

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-4fbd74e7ca0b30173c47a1d58ed6a0804a0465aa%2FAlert_Sources.png?alt=media\&token=aaca6610-9d18-4dd4-9cf5-320042f326f1)

2\. Select **Graylog**. Copy the displayed **Webhook URL** to [configure](#create-a-squadcast-webhook-in-graylog) it within **Graylog.** Finish by clicking **Add Alert Source** -> **Done**.

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-4dc252a4e95101929a9d7910415b55e738df7054%2FGraylog.png?alt=media\&token=602fea28-f394-45c8-8c73-585f83097780)

{% hint style="warning" %}
**Important:**

When an alert source turns Active, it’ll show up under Configured Alert Sources, you can either generate a test alert from the integration or wait for a real-time alert to be generated by the Alert Source. An Alert Source is active if there is a recorded incident via that Alert Source for the Service.
{% endhint %}

### Create a Squadcast Webhook in Graylog

1. Login to your graylog web console and go to **Alert** tab on the top.
2. Click on **Notifications**.
3. Click on **Add new notification**.
4. Select **All messages** on **Notify on Stream**
5. Select **HTTP Alarm Callback** on **Notification type** and click on **Add alert notification**.
6. Give a title to the notification and put the Squadcast web hook url from the previous step on the url field and click on **Save**.

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-4c494c605b825dcf5cea01d89264d9863e0fc61b%2Fgraylog_2.png?alt=media\&token=b8ce556b-f7cf-4503-a9f3-a16b0209a1a3)

Now whenever an alert is triggered by Graylog, an incident will be created automatically in Squadcast.

*Have any questions?* [*Ask the community*](https://community.squadcast.com/view/home)*.*