Integrate with Loggly

What does the integration offer?

Compass provides a web API for Loggly to create alerts directly in Compass servers. Forward Loggly alerts to Compass to notify users via iOS and Android push notifications, email, SMS, and phone calls, track the alert lifecycle, escalate alerts, etc.

How does the integration work?

When an alert is created in Loggly, an alert is also created in Compass automatically through the integration.

Set up the integration

Loggly is an API-based integration. Setting it up involves the following steps:

Add a Loggly integration in Compass
Configure the integration in Loggly

Add a Loggly integration

In this release, only incoming integrations are fully supported in the Standard plan, at a team level. To use outgoing integrations or the outgoing part of bidirectional integrations, upgrade to a higher subscription plan. There may be restrictions on how you can create and apply integration rules as well.

You can add this integration only from your team’s operations page. Adding an integration from your team’s operations page makes your team the owner of the integration. This means Compass only assigns the alerts received through this integration to your team.

To add a Loggly integration in Compass, complete the following steps:

Go to your team’s operations page.
On the left navigation panel, select Integrations and then Add integration.
Run a search and select “Loggly”.
On the next screen, enter a name for the integration.
Optional: Select a team in Assignee team if you want a specific team to receive alerts from the integration.
Select Continue.
The integration is saved at this point.
Expand the Steps to configure the integration section and copy the API URL.
You will use this URL while configuring the integration in Loggly later.
Select Turn on integration.
The rules you create for the integration will work only if you turn on the integration.

Configure the integration in Loggly

To configure the integration of Loggly with Compass, complete the following steps:

In Loggly, go to Alerts > Add New.
Select a "Saved Search" method in Search.
Leave Send to an endpoint selected.
Select Add New.
Select "HTTP Endpoint" for Endpoint.
Select "POST" for Method.
Paste the API URL copied previously into URL.
Leave Enable this alert selected and select Submit Alert.

Sample payload sent from Loggly to Compass

JSON

{
  "owner_email":"ops@jsm.com",
  "start_time":"Jul 14 17:32:51",
  "source_group":"N/A",
  "query":"airplaneQuery ",
  "owner_username":"opsgenius",
  "end_time":"Jul 14 17:37:51",
  "search_link":"https://jsmtest.loggly.com/search/?terms=airplane&source_group=&savedsearchid=38364&from=2014-07-14T17%3A32%3A51Z&until=2014-07-14T17%3A37%3A51Z",
  "owner_subdomain":"jsmtest",
  "alert_name":"airplane",
  "recent_hits":[
    "        \"airplane\": \"jumbo\",",
    "        \"airplane\": \"tiny\","
  ],
  "edit_alert_link":"https://jsmtest.loggly.com/alerts/edit/3558",
  "num_hits":2
}

Operations