fetch_graylog_messages
Retrieve log messages from Graylog instances by specifying search queries, time ranges, and field filters.
Instructions
Fetch messages from a Graylog instance.
Active instances: "instance_1". Default instance: "instance_1".
Use the "instance" parameter to target a specific Graylog server. Each instance is identified by its label (set via GRAYLOG_LABEL_INSTANCE_N env var). If no label is configured, instances are identified as "instance_1", "instance_2", etc.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| instance | No | Which Graylog instance to query. Active: "instance_1". Default: "instance_1". | |
| query | Yes | The search query, using Graylog query syntax (e.g. "level:ERROR AND service:api"). | |
| searchTimeRangeInSeconds | No | Relative time range in seconds. Default: 900 (15 minutes). | |
| searchCountLimit | No | Max number of messages to return. Default: 50. | |
| fields | No | Comma-separated list of fields to return. Default: '*' (all fields). |