Graylog v4

Send alerts to Squadcast from Graylog v4

Graylog v4 is a leading centralized log management solution built to open standards for capturing, storing, and enabling real-time analysis of terabytes of machine data. They deliver a better user experience by making analysis ridiculously fast and efficient using a more cost-effective and flexible architecture.

Route detailed monitoring alerts from Graylog v4 to the right users in Squadcast.

How to integrate Graylog v4 with Squadcast

In Squadcast: Using Graylog v4 as an Alert Source

1. Navigate to Services -> Service Overview -> select or search for your Service. Expand the accordion -> In the Alert Sources section, click Add.

2. Select Graylog v4. Copy the displayed Webhook URL to configure it within Graylog v4. Finish by clicking Add Alert Source -> Done.

Important:

When an alert source turns Active, it’ll show up under Configured Alert Sources, you can either generate a test alert from the integration or wait for a real-time alert to be generated by the Alert Source. An Alert Source is active if there is a recorded incident via that Alert Source for the Service.

In Graylog v4: Add a Webhook for Squadcast

(1) After logging in, select Alerts from the navigation bar on the top

(2) Select Notifications

(3) If you do not have any existing Notifications set up, select Get Started. Else, select Create Notification

(4) Fill in the details:

(a) A meaningful Title (b) An optional Description (c) Notification Type: Select HTTP Notification (d) URL: Paste the copied Squadcast Webhook URL (e) Select Add to URL Whitelist. Here, click on Add URL and add: - A meaningful Title - URL: Paste api.squadcast.com - Type: Regex - Save the configuration

(f) Now, click on Execute Test Notification to generate a test alert and trigger a test incident in Squadcast

(g) Save the configuration

(5) Within Alerts, head over to Event Definitions. If there are no existing Event Definitions, you can create one or pick an existing Event Definition

(6) Navigate to Notifications in the set-up flow and select Add Notification and select the Squadcast notification added previously and Save the entire configuration in the end

That is it, you are now good to go! Whenever an alert is triggered in Graylog v4, an incident will be created automatically in Squadcast.

FAQ:

Q: If an alert gets resolved in Graylog v4, does Graylog v4 send auto-resolve signals to Squadcast?

A: No, Graylog v4 does not send any auto-resolve signals to Squadcast. Incidents for alerts from Graylog v4 need to be manually resolved in Squadcast.