Search and aggregate production logs via the Graylog MCP server.
npx skills add https://github.com/stefanbosak/claude-cli --skill graylog-prd-stefanbosak
Please help me install this Agent Skill. Skill: graylog-prd Source: https://github.com/stefanbosak/claude-cli/tree/main/.claude/skills/graylog-prd Command: npx skills add https://github.com/stefanbosak/claude-cli --skill graylog-prd-stefanbosak
Graylog test environment specialist for log search, aggregation, and analysis. Use when asked to: search logs, find errors, query streams, analyze log patterns, investigate test run failures, debug issues, or check log volumes in the production environment. Trigger keywords: graylog-prd. Do NOT use for testing environment logs (use graylog-tst instead).
list_fields) before queryingProvide the Graylog-prd environment configuration and run a basic search in the production-like test environment.
High-intent search queries and answers about installing and using this skill.
To search production logs in Graylog, use Lucene query syntax to find errors and investigate test run failures. You can scope queries to specific streams and discover available fields before executing searches to pinpoint time-bound log events.
Aggregating log volumes and finding patterns in a production-like environment involves grouping log messages by specific fields. You can perform count, average, min, max, and percentile aggregations to analyze log patterns and check data volumes.
Yes, you can list available streams and index sets before querying Graylog production logs. Listing streams scopes your searches, while listing index sets shows data retention configuration, and listing inputs reveals configured syslog or GELF sources.
Discovering fields per stream improves log analysis by revealing the exact data structure available before querying. This allows you to build precise Lucene queries and aggregations, making debugging issues and investigating log patterns more efficient.
You should not use this approach for log search and troubleshooting when investigating testing environment logs. This specific setup is restricted to the production environment, requiring a different configuration for test environment log analysis.
pi-2rSearch and analyze Graylog test environment logs with Lucene syntax.
dohernandezDiagnose production issues by correlating alerts and logs into root-cause hypotheses.
lloydchangAggregate alerts from monitoring systems and compute incident severity.
stefanbosakQuery Graylog test environment streams, indices, and fields via REST API.