Graylog Integration Guide

Graylog is a powerful log management, aggregation and searching tool. You can set up notifications to go to PagerDuty when a Graylog stream triggers an alert. This allows you to utilize PagerDuty as the centralized location for on-call scheduling and notifications of your team.

(note) Required Graylog version: 3.1 and later

In PagerDuty

1. 1. 1. From the Services menu, select Service Directory.
      2. If you are creating a new service for your integration, click +New Service. If you are adding your integration to an existing service, click the name of the service you want to add the integration to. Then click the Integrations tab and click Add a new integration.
      3. Select your integration from the Integration Type menu and enter an Integration Name. If you are creating a new service for your integration, in General Settings, enter a Name for your new service. Then, in Incident Settings, specify the Escalation Policy, Notification Urgency, and Incident Behavior for your new service.
      4. Click the Add Service or Add Integration button to save your new integration. You will be redirected to the Integrations page for your service.
      5. Copy the Integration Key for your new integration.

On Your Graylog Server

1. 1. Download the Graylog PagerDuty plugin from GitHub. Then to install it, copy the .jar file that you received to your Graylog plugin directory which is configured in your graylog2.conf configuration file using the plugin_dir variable. Restart your graylog2-server process to load the plugin. Note: You should do this for every graylog2-server instance you are running.
   2. Next, paste the PagerDuty Integration Key in the PagerDuty service key field during the alert callback configuration in Graylog.
   3. Once you’ve set off a new alarm within Graylog, an incident will be triggered in PagerDuty.