LogScale

LogScale

LogScale is a platform for consuming and monitoring event data ingested from logs. The software is designed to be used by system administrators and DevOps to monitor large quantities of data from logs, derive the individual events within those logs, and parse the content in order to extract key data points from the source. The extracted and identified data can be used to build graphs, identify anomalies, and create alerts to monitor your systems. Use the integration to start sending monitoring events from LogScale to BigPanda.

👍

Open Integration Manager

The Open Integration Manager is available for use with LogScale. For more information, see the Open Integration Manager documentation.

Install the Integration

Configure a LogScale action to send events to BigPanda

1. Navigate to the Administration menu.
2. On the Administration page, click Action Administration, and then from the Action Administration page, click the Action Type: Webhook tab.
3. At the bottom of the page, click Add to open the Add Action window.
4. Enter a name and description for the action.
5. Next to Action Steps, click the Add button and enter the Endpoint URL: https://integrations.bigpanda.io/logscale/alerts?$?access_token=<Your Org Bearer Token>&app_key=<Your App Key>
6. Enter the HTTP method: POST
7. Enter the HTTP Headers: Content-Type:application/json
8. Enter the Message Body Template, and click OK to save the template, and then click OK to save the action.

{
    "repository": "{repo_name}",
    "timestamp": {triggered_timestamp},
    "alert": {
       "name": "{name}",
       "description": "{description}",
       "query": {
          "queryString": "{query_string} ",
          "end": "{query_time_end}",
          "start": "{query_time_start}"
      },
      "notifierID": "{action_id}",
      "id": "{id}"
    },
    "warnings": "{warnings}",
    "events": {events},
    "numberOfEvents": {event_count}
}

The BigPanda integration is now installed and all of your LogScale alerts will be automatically sent to BigPanda!

Delete the Integration

Deleting an integration requires that you remove the integration in both the integrated system and BigPanda. We recommend that you first uninstall the integration on the integrated system to prevent traffic from being sent and rejected by BigPanda, since the app key will not exist once you delete the integration in BigPanda.

❗️

Caution During Replacement

When replacing an existing integration with a new tool or system, we recommend configuring the new integration first to ensure no data is lost.

Deactivate Inbound Integration

If you want to stop sending data to BigPanda but don’t want to delete your integration, you can temporarily deactivate it.

This feature is currently only available for inbound integrations.

To deactivate an inbound integration:

1. In BigPanda, navigate to the Integrations tab and select the desired integration from the list. This will open integration details on the right side of the window.
2. At the top of the integration details, click the Active/Inactive toggle next to the application name to change the status of the integration.

In the integrations list, inactive integrations will be marked with a gray bar.

Stop Sending Data to BigPanda

Within the integrated system, disable any settings that send data to BigPanda.

Each system requires specific changes to disable the integration with BigPanda. For example, you must delete the topic in CloudWatch, and you must disable the alert channel in New Relic. To determine the changes for your integrated system, reference the relevant documentation or contact BigPanda support.

Manually resolve any open alerts sent from the integration to remove the associated incidents from your incident feed. These incidents will not automatically resolve without an ok status from the original sending integration.

Delete the Integration in BigPanda

Take the following steps to delete the integration from BigPanda:

1. In BigPanda, navigate to the Integrations tab and select the desired integration from the list.
2. In the integration details on the right of the page, click the trash icon, then confirm you want to delete the integration. The integration will be removed immediately.

👍

️Automatic Alert Resolution for Deleted Integrations

All active alerts from the integration will be resolved after deletion.

❗️

Data Removal

This procedure does not remove any data from the integrated system.