> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flashcat.cloud/llms.txt
> Use this file to discover all available pages before exploring further.

# Graylog Alert Events

> Sync Graylog alert events to Flashduty via webhook for automated alert noise reduction

Sync Graylog alert events to Flashduty via webhook for automated alert noise reduction.

<div class="hide">
  ## In Flashduty

  ***

  You can obtain an integration push URL through either of these two methods:

  ### Using Private Integration

  Choose this simpler option when you don't need to route alert events to different channels.

  <details>
    <summary>Expand</summary>

    1. Go to the Flashduty console, select **Channel**, and enter a specific channel's details page
    2. Select the **Integrations** tab, click **Add Integration** to enter the integration page
    3. Choose **Graylog** integration and click **Save** to generate a card
    4. Click the generated card to view the **push URL**, copy it for later use, and you're done
  </details>

  ### Using Shared Integration

  Choose this option when you need to route alerts to different channels based on the alert event's payload information.

  <details>
    <summary>Expand</summary>

    1. Go to the Flashduty console, select **Integration Center=>Alert Events** to enter the integration selection page
    2. Select **Graylog** integration:
       * **Integration Name**: Define a name for this integration
    3. Configure the default route and select the corresponding channel (after the integration is created, you can go to `Route` to configure more routing rules)
    4. Click **Save** and copy the newly generated **push URL** for later use
    5. Done
  </details>
</div>

## In Graylog

***

<div class="md-block">
  ## I. Graylog Alert Push Configuration

  ### Step 1: Configure Alert Channel

  1. Log in to the Graylog console
  2. Find Alerts in the menu and select Notifications
  3. Create Notification
  4. Enter Title and Description
  5. Select **HTTP Notification** as Notification Type, as shown below

  <img alt="drawing" width="600" src="https://fcpub-1301667576.cos.ap-nanjing.myqcloud.com/flashduty/doc/graylog-2.png" />

  6. Enter the Flashduty URL you obtained (URL whitelist required for first-time use)

  <img alt="drawing" width="600" src="https://fcpub-1301667576.cos.ap-nanjing.myqcloud.com/flashduty/doc/graylog-3.png" />

  7. Click Save to whitelist the URL

  <img alt="drawing" width="600" src="https://fcpub-1301667576.cos.ap-nanjing.myqcloud.com/flashduty/doc/graylog-1.png" />

  8. After saving, submit Create

  <img alt="drawing" width="600" src="https://fcpub-1301667576.cos.ap-nanjing.myqcloud.com/flashduty/doc/graylog-5.png" />

  ### Step 2: Use Flashduty Alert Channel in Alert Events

  1. Create or edit existing Event Definition
  2. Skip other alert configurations here (configure alert conditions according to business requirements)
  3. Configure channel in Notifications
  4. Add Notification and select Flashduty channel
  5. Click Done
  6. Complete the next step to finish

  <img alt="drawing" width="600" src="https://fcpub-1301667576.cos.ap-nanjing.myqcloud.com/flashduty/doc/graylog-4.png" />
</div>

## II. Status Mapping

<div class="md-block">
  | Graylog | Flashduty | Status   |
  | ------- | --------- | -------- |
  | 3       | Critical  | Critical |
  | 2       | Warning   | Warning  |
  | 1       | Info      | Info     |
</div>