An AI agent skill for searching, filtering, and debugging production logs via Graylog using absolute or relative time queries.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install graylog-log-search
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install graylog-log-search using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Graylog Log Search?
Graylog Log Search is a robust integration designed to provide AI agents with direct access to production logs stored in Graylog. By utilizing Openclaw Skills, developers and DevOps engineers can query logs using natural language or structured Elasticsearch syntax without leaving their terminal or IDE. This skill is essential for maintaining high availability and rapid incident response by bridging the gap between raw log data and actionable AI insights.
The integration focuses on read-only operations to ensure security while providing deep visibility into application behavior. It allows for precise filtering across streams and timeframes, making it a cornerstone for teams using Openclaw Skills to automate their observability and debugging workflows. Whether you are tracking a specific error trace or monitoring system-wide health, this skill provides the necessary interface to interact with Graylog programmatically.
Graylog Log Search Use Cases
- Search for specific ERROR or CRITICAL log levels in production environments within the last 15 minutes.
- Filter HTTP 500 errors from a specific microservice stream during a deployment window.
- Monitor the health and processing status of your Graylog instance to ensure no logs are being dropped.
- Correlate events across multiple sources using boolean operators and exact phrase matching.
- Retrieve log data for specific historical windows using ISO 8601 absolute timestamps for post-mortem analysis.
How Graylog Log Search Works
- The AI agent connects to the Graylog instance using the BASE_URL and API_TOKEN configured within Openclaw Skills.
- The skill exposes 4 primary tools: search_logs_absolute, search_logs_relative, list_streams, and get_system_info.
- When a user requests log data, the agent constructs a query based on Elasticsearch syntax and sends it to the Graylog API.
- The skill validates all input parameters, including time ranges and result limits, to ensure efficient resource usage.
- Results are returned as structured JSON, which the AI agent then interprets to provide a summarized or detailed response to the user.
Graylog Log Search Setup
To deploy this skill within your environment, install the package via npm:
npm install -g [email protected]
Add the server to your configuration for Openclaw Skills or Claude Desktop:
{
"mcpServers": {
"graylog": {
"command": "npx",
"args": ["-y", "[email protected]"],
"env": {
"BASE_URL": "https://your-graylog-instance.example.com",
"API_TOKEN": "your_graylog_api_token"
}
}
}
}
To generate an API token, navigate to Graylog Web UI > System > Users > Edit User > Tokens.
Graylog Log Search Data Schema & Taxonomy
The skill returns structured data optimized for AI consumption. Log entries and system metadata are organized as follows:
| Tool | Output Type | Key Fields |
|---|---|---|
search_logs |
Array of Messages | timestamp, source, message, level, stream_id |
list_streams |
Array of Streams | id, title, description, is_default |
get_system_info |
Object | version, health_status, is_processing, cluster_id |
All log queries support Elasticsearch query syntax, allowing for field-specific searches (e.g., source:api-server) and range-based filters (e.g., status:>=500).
Graylog Log Search Advanced Features
- Support for complex boolean queries (AND, OR, NOT) and wildcard matching for granular log discovery.
- Stream-based filtering to isolate traffic from specific applications or environments.
- Security-first design with read-only access and credential isolation via environment variables.
- Built-in result limits and request timeouts to prevent large queries from impacting instance performance.
- Integrated system health checks available directly through Openclaw Skills to verify the log ingestion pipeline.
SKILL.md
Loading
Related Openclaw Skills
Content Marketing Strategy
A comprehensive framework for planning multi-channel content strategies, defining formats, and executing high-ROI content repurposing workflows.
Sonos Music Playback
A specialized Sonos playback skill for Chinese music services like NetEase and QQ Music, optimized for Openclaw Skills environments.
Integrated Marketing Strategy
A strategic framework for coordinating consistent messaging and unified customer experiences across all marketing channels.
Domain Architecture
A strategic framework for deciding between subfolders, subdomains, and independent domains to optimize brand architecture and SEO authority.
Whisk AI Image Remixer
A generative creative engine that transforms and blends your photos into entirely new AI-generated visuals.
Free Image to Video AI Generator
An AI-powered automation skill that transforms static images into dynamic, motion-rich videos for social media and marketing.
Featured*
