# Graylog v4

[<mark style="color:blue;">Graylog v4</mark>](https://www.graylog.org/products/latestversion) is a leading centralized log management solution built to open standards for capturing, storing, and enabling real-time analysis of terabytes of machine data. They deliver a better user experience by making analysis ridiculously fast and efficient using a more cost-effective and flexible architecture.

Route detailed monitoring alerts from Graylog v4 to the right users in Squadcast.

### How to integrate Graylog v4 with Squadcast

### In Squadcast: Using Graylog v4 as an Alert Source

1. Navigate to **Services** -> **Service Overview** -> select or search for your Service. Expand the accordion -> In the Alert Sources section, click **Add**.

![](/files/ej4AI9zpOyFu5NZJCbwC)

2\. Select **Graylog v4**. Copy the displayed **Webhook URL** to [configure](#in-graylog-v4-add-a-webhook-for-squadcast) it within **Graylog v4.** Finish by clicking **Add Alert Source** -> **Done**.

![](/files/D0qPUnuf6Nehw3jYCXzy)

{% hint style="warning" %}
**Important:**

When an alert source turns Active, it’ll show up under Configured Alert Sources, you can either generate a test alert from the integration or wait for a real-time alert to be generated by the Alert Source. An Alert Source is active if there is a recorded incident via that Alert Source for the Service.
{% endhint %}

### In Graylog v4: Add a Webhook for Squadcast

**(1)** After logging in, select **Alerts** from the navigation bar on the top

![](/files/Aun9KP5x6a1UmhqYURQu)

**(2)** Select **Notifications**

![](/files/HB5Hslh3eIobqp4CJDxn)

**(3)** If you do not have any existing Notifications set up, select **Get Started**. Else, select **Create Notification**

![](/files/0YPjzFRYomPCS8IqwxAX)

**(4)** Fill in the details:

![](/files/KGaSRjn6VikwsfNaCmpK)

(a) A meaningful **Title** (b) An optional **Description** (c) **Notification Type**: Select **HTTP Notification** (d) **URL**: Paste the copied Squadcast Webhook URL (e) Select **Add to URL Whitelist**. Here, click on **Add URL** and add: - A meaningful **Title** - **URL**: Paste `api.squadcast.com` - **Type**: `Regex` - **Save** the configuration

<figure><img src="/files/Zxkr1QVdF5z7Cr8QjBH9" alt="" width="563"><figcaption></figcaption></figure>

(f) Now, click on **Execute Test Notification** to generate a test alert and trigger a test incident in Squadcast

(g) **Save** the configuration

**(5)** Within **Alerts**, head over to **Event Definitions**. If there are no existing Event Definitions, you can create one or pick an existing Event Definition

![](/files/JF9Wohne10JEOcXV2JST)

**(6)** Navigate to **Notifications** in the set-up flow and select **Add Notification** and select the *Squadcast notification* added previously and **Save** the entire configuration in the end

![](/files/ldfZ9xOuPIzOAGBIGYbY)

That is it, you are now good to go! Whenever an alert is triggered in Graylog v4, an incident will be created automatically in Squadcast.

{% hint style="info" %}
**FAQ:**

Q: If an alert gets resolved in Graylog v4, does Graylog v4 send auto-resolve signals to Squadcast?

A: No, Graylog v4 does not send any auto-resolve signals to Squadcast. Incidents for alerts from Graylog v4 need to be manually resolved in Squadcast.
{% endhint %}

*Have any questions?* [*Ask the community*](https://community.squadcast.com/view/home)*.*


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://support.incidents.cloud.solarwinds.com/integrations/alert-source-integrations-native/graylog-v4.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
