> For the complete documentation index, see [llms.txt](https://support.incidents.cloud.solarwinds.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://support.incidents.cloud.solarwinds.com/integrations/alert-source-integrations-native/logzio.md).

# Logz.io

Effortlessly configure Logz.io integration for incident management with Squadcast - A comprehensive guide on setting up and optimizing Logz.io for efficient incident response.

[<mark style="color:blue;">Logz.io</mark>](https://logz.io/) allows engineers to look into their stack with powerful log, metric and tracing analytics based on the cloud-native tools they use.

Route detailed monitoring alerts from Logz.io to the right users in Squadcast.

### How to integrate Logz.io with Squadcast

### In Squadcast: Using Logz.io as an Alert Source

1. Navigate to **Services** -> **Service Overview** -> select or search for your Service. Expand the accordion -> In the Alert Sources section, click **Add**.

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-4fbd74e7ca0b30173c47a1d58ed6a0804a0465aa%2FAlert_Sources.png?alt=media\&token=aaca6610-9d18-4dd4-9cf5-320042f326f1)

2\. Select **Logz.io.** Copy the displayed **Webhook URL** to [configure](#in-logz.io-create-a-squadcast-webhook-alert) it within **Logz.io**. Finish by clicking **Add Alert Source** -> **Done.**

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-c10285152ad6439f82636884ee0eaa164961b24c%2FLogz.io.png?alt=media)

{% hint style="warning" %}
**Important:**

When an alert source turns Active, it’ll show up under Configured Alert Sources, you can either generate a test alert from the integration or wait for a real-time alert to be generated by the Alert Source. An Alert Source is active if there is a recorded incident via that Alert Source for the Service.
{% endhint %}

### In Logz.io: Create a Squadcast webhook alert

**(1)** In the app, go to **Alerts & Events > Notification endpoints** to create the webhook

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-8000e587681fc61d30582139c2949903e0aee48b%2Flogzio_2.png?alt=media)

**(2)** Click on **Add endpoint**

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-9677d7ced4316c771f3a01f1b23e1177d863c100%2Flogzio_3.png?alt=media)

**(3)** Fill in the form as shown below:

* **Type**: Custom
* **Name**: Squadcast Webhook
* **Description** (optional)
* **URL**: Paste the URL endpoint that was copied from Squadcast Service for Logz.io
* **Method**: POST
* Run the test to see if you received a test alert in Squadcast
* Click on **Save**

Find more details on how each of these parameters can be configured [here](https://docs.logz.io/user-guide/integrations/custom-endpoints.html)

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-85589ca9a455e215e835c50aa5438cf662cf4f44%2Flogzio_4.png?alt=media)

```json
{
    "alert_title": "{{alert_title}}",
    "alert_description": "{{alert_description}}",
    "alert_severity": "{{alert_severity}}",
    "account_id": "{{account_id}}",
    "account_name": "{{account_name}}",
    "alert_samples": "{{alert_samples}}",
    "alert_tags_json": "[{{alert_tags_json}}]"
}
```

**(4)** Next, to create the alert itself, you can either:

* Go to **Alerts & Events > New Alert** or,
* Click on **Create Alert** from the **Kibana dashboard**

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-b0d91546638f6213a17f00e71f9d16cb228f20c7%2Flogzio_5.png?alt=media)

Find more details on how each of these parameters can be configured [here](https://docs.logz.io/user-guide/alerts/configure-an-alert.html)

**(5)** Give the alert a **title**

Now, you will have to fill out the 3 sections:

(a) **Search for...** section:

* Either enter your **Search** query or verify that the query present is correct
* Choose to **Group By** certain fields
* Select **Accounts to Search**
* Choose to repeat this (by adding another query), join the queries, etc.

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-b316a3934a4af6d2f00fcf64306bae05129a2227%2Flogzio_6.png?alt=media)

**(5)** (b) **Trigger if...** section:

* Add **Trigger conditions** for the alert and add one or more thresholds for the trigger

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-4aac7a8585c694798005a18e0a03161df06c964e%2Flogzio_7.png?alt=media)

**(5)** (c) **Notify** section:

* Add a **Description** for the alert (which will be visible for these incidents in Squadcast)
* Associate **Tags** (if any)
* **Who to send it to** -> choose **Squadcast Webhook**
* Choose a **wait time** between notifications as needed
* **Output format** -> choose **JSON**
* You can choose to either send **all log fields** or **custom fields**

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-397225debeac9bcfcaf32232713228eb22fe3a44%2Flogzio_8.png?alt=media)

**(6)** Click on **Save**

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-b06bbe1f6259dcb1f2a19299299dd21969486726%2Flogzio_9.png?alt=media)

That is it, you are now good to go! Whenever a log alert is triggered in Logz.io, an incident will be created automatically in Squadcast.

{% hint style="info" %}
**FAQ:**

Q: If an alert gets resolved in Logz.io, does Logz.io send auto-resolve signals to Squadcast?

A: No, Logz.io does not send auto-resolve signals to Squadcast. Hence, Squadcast incidents from Logz.io should be resolved manually.
{% endhint %}

*Have any questions?* [*Ask the community*](https://community.squadcast.com/view/home)*.*