Graylog

Unofficial Graylog MCP

javascript

0

GitHub Stars

javascript

Language

7 months ago

First Indexed

3 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "princegupta1999-graylog-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "graylog-mcp"
      ],
      "env": {
        "GRAYLOG_BASE_URL": "https://YOUR_GRAYLOG_INSTANCE_URL/",
        "GRAYLOG_PASSWORD": "YOUR_PASSWORD",
        "GRAYLOG_USERNAME": "YOUR_USERNAME"
      }
    }
  }
}

The Graylog MCP Server enables AI IDEs and assistants to securely query a Graylog instance through the Model Context Protocol. It exposes standardized MCP tools for universal search, supporting relative time windows, absolute timestamps, and optional count-only results to keep payloads small while you explore your Graylog data.

How to use

You connect to the Graylog MCP Server from an MCP client or IDE by configuring a local or remote MCP entry point. Start by running the MCP server in stdio mode, which keeps it as a local process that your tools can communicate with directly. Provide your Graylog credentials and base URL so the server can perform universal search queries on your behalf.

How to install

Prerequisites you need before starting are a Node-compatible runtime and Bun for building and running the MCP server locally.

Install Bun and prepare your environment if you haven’t already.

Install dependencies and build the project.

# Install deps (if any) and build
bun install
bun run build

Run the MCP server locally using the required Graylog credentials. This starts the server in stdio mode so your IDE or agent can communicate with it directly.

export GRAYLOG_BASE_URL="https://your-graylog.example/"
export GRAYLOG_USERNAME="your-user"
export GRAYLOG_PASSWORD="your-password"
bun index.ts

Optionally, verify the MCP server health against the Graylog universal search endpoints.

export GRAYLOG_BASE_URL="https://your-graylog.example/"
export GRAYLOG_USERNAME="your-user"
export GRAYLOG_PASSWORD="your-password"

bun run test:graylog

Configuration and usage notes

Configure your MCP client or IDE to launch the MCP server with the required environment variables. Example configuration for a client might look like this:

{
  "graylog": {
    "command": "npx -y graylog-mcp",
    "env": {
      "GRAYLOG_BASE_URL": "https://YOUR_GRAYLOG_INSTANCE_URL/",
      "GRAYLOG_USERNAME": "YOUR_USERNAME",
      "GRAYLOG_PASSWORD": "YOUR_PASSWORD"
    }
  }
}

Security notes

Use scoped, least-privilege Graylog credentials. Do not commit secrets to source control; prefer environment managers or secret stores whenever possible.