ITOC360 is an incident response platform — it receives alerts from your monitoring stack, deduplicates them, applies priority and escalation policies, and pages the on-call engineer through push, SMS, voice and chat.
This integration lets Graylog act as an alert source for ITOC360 using Graylog’s built-in HTTP Notification. No plugin, no agent, nothing to deploy on the Graylog side.
What you get
- Graylog alerts routed into an on-call rotation with escalation rules
- Deduplication — repeated triggers of the same event definition collapse into one alert instead of flooding the team
- Graylog event priority mapped to ITOC360 priority
- Acknowledge, escalate, group into incidents, silence during maintenance windows
Requirements
- Graylog 4.0 or later, any edition
- An ITOC360 account (a source token is generated in the UI — no API key or OAuth app needed)
- Outbound HTTPS from the Graylog server to
api.itoc360.app
Setup
- Create a Graylog source in ITOC360 and copy the generated webhook URL
- In Graylog, create an HTTP Notification pointing at that URL
- Attach the notification to your event definitions
Full setup guide, field and priority mapping, deduplication behaviour and troubleshooting are in the repository README.
One thing worth stating up front: Graylog does not send a recovery notification when a condition stops matching, so alerts from Graylog do not close by themselves. The README covers the options for handling that.
Feedback and issues welcome — either here or in the repository.