Humio

Humio is a live observability platform that enables data aggregation, exploration, reporting and analysis from a range of sources. The purpose-built logging tool features innovative data storage and in-memory search/query engine technologies.

Integration with LogicHub

Connecting with Humio

To connect to Humio following details are required:

  • Label: Connection name.
  • Reference Values: Define variables here to templatize integration connections and actions. For example, you can use https://www.{{hostname}}.com where, hostname is a variable defined in this input. For more information on how to add data, see 'Add Data' Input Type for Integrations.
  • API Key: The API Key to connect to the Humio.

Actions with Humio

Execute Query

Query the data from Humio, retrieves the list of events/activities based on filter criteria.

Inputs to this Action

  • Connection: Choose a connection that you have created.
  • Start Time (Optional): Column name from parent table holding value for start time, expressed as epoch milliseconds (Default is Batch start time). Example: 1588676868908.
  • End Time (Optional): Column name from parent table holding value for the end time, expressed as epoch milliseconds (Default is Batch end time). Example: 1588676868908.
  • Jinja Template for Repository: Jinja-templated text containing the value for repository. Example: {{repo_prefix_column_name}}-{{repo_suffix_column_name}}.
  • Jinja Template for Query String: Jinja-templated text containing the query string to use. Example: This is {{query_column_name}}.
  • Is Live (Optional): Select option for is live, that sets whether this query is live (Default is 'False'). Live queries are continuously updated.
  • Time Zone Offset Minutes (Optional): Column name from the parent table to lookup value for time zone offset minutes (default is 0).
  • Jinja Template for Arguments(Optional): Jinja-templated query containing comma-separated values of arguments. Example: {{arguments_column_name1}}, {{arguments_column_name2}}.

Output of Action
JSON containing the following items:

  • has_error: True/False
  • error: message/null
  • result: List of events/activities.

Query Job

Issue a query job to Humio, retrieves the list of events/activities based on filter criteria.

Inputs to this Action

  • Connection: Choose a connection that you have created.
  • Start Time (Optional): Column name from parent table holding value for start time, expressed as epoch milliseconds (Default is Batch start time). Example: 1588676868908.
  • End Time (Optional): Column name from parent table holding value for the end time, expressed as epoch milliseconds (Default is Batch end time). Example: 1588676868908.
  • Jinja Template for Repository: Jinja-templated text containing the value for repository. Example: {{repo_prefix_column_name}}-{{repo_suffix_column_name}}.
  • Jinja Template for Query String: Jinja-templated text containing the query string to use. Example: This is {{query_column_name}}.
  • Is Live(Optional): Select option for is live, that sets whether this query is live (Default is 'False'). Live queries are continuously updated.
  • Time Zone Offset Minutes (Optional): Column name from the parent table to lookup value for time zone offset minutes (Default is 0).
  • Jinja Template for Arguments(Optional): Jinja-templated query containing comma-separated values of arguments. Example: {{arguments_column_name1}}, {{arguments_column_name2}}.

Output of Action
JSON containing the following items:

  • has_error: True/False
  • error: message/null
  • result: Job ID.

Poll

Issue poll command to Humio.

Inputs to this Action

  • Connection: Choose a connection that you have created.
  • Jinja Template for Repository: Jinja-templated text containing the value for repository. Example: {{repo_prefix_column_name}}-{{repo_suffix_column_name}}.
    *Job ID: Column name from parent table to lookup value for ID. Example: This is {{id_column_name}}.

Output of Action
JSON containing the following items:

  • has_error: True/False
  • error: message/null
  • result: Poll_Result.

Delete Job

Issue a job delete command to Humio.

Inputs to this Action

  • Connection: Choose a connection that you have created.
  • Jinja Template for Repository: Jinja-templated text containing the value for repository. Example: {{repo_prefix_column_name}}-{{repo_suffix_column_name}}.
    *Job ID: Column name from parent table to lookup value for ID. Example: This is {{id_column_name}}.

Output of Action
JSON containing the following items:

  • has_error: True/False
  • error: message/null
  • result: Success/Failure message.

List Alerts

Issue list alerts from Humio retrieves the list of alerts.

Inputs to this Action

  • Connection: Choose a connection that you have created.
  • Jinja Template for Repository: Jinja-templated text containing the value for repository. Example: {{repo_prefix_column_name}}-{{repo_suffix_column_name}}.

Output of Action
JSON containing the following items:

  • has_error: True/False
  • error: message/null
  • result: List of alerts.

Get Alert By ID

Get alert by ID from Humio retrieves the alert details.

Inputs to this Action

  • Connection: Choose a connection that you have created.
  • Jinja Template for Repository: Jinja-templated text containing the value for repository. Example: {{repo_prefix_column_name}}-{{repo_suffix_column_name}}.
  • Alert ID: Column name from parent table to lookup value for alert ID. Example: This is {{id_column_name}}.

Output of Action
JSON containing the following items:

  • has_error: True/False
  • error: message/null
  • result: Alert details.

Create Alert

Create an alert in Humio.

Inputs to this Action

  • Connection: Choose a connection that you have created.
  • Start Time (Optional): Column name from parent table holding value for start time, expressed as epoch milliseconds (Default is Batch start time). Example: 1588676868908.
  • Jinja Template for Repository: Jinja-templated text containing the value for repository. Example: {{repo_prefix_column_name}}-{{repo_suffix_column_name}}.
  • Name: Column name from the parent table to lookup value for the name of the alert. Example: This is {{name_column_name}}.
  • Jinja Template for Query String: Jinja-templated query containing the query string to use. Example: This is {{query_column_name}}.
  • Jinja Template for Notifiers(Optional): Jinja-templated query containing comma-separated values of notifier ids. Example: {{column1}}, {{column2}}.
  • Jinja Template for Description(Optional): Jinja-templated query containing the description. Example: This is {{description_column_name}}.
  • Throttle Time Millis(Optional): Column name from the parent table to lookup value for time millis interval (default is 0).
  • Silenced (Optional): Select a value for silenced (default is FALSE).
  • Jinja Template for Labels(Optional): Jinja-templated query containing comma-separated values of labels (default is empty value). Example: This is {{labels_column_name}}.

Output of Action
JSON containing the following items:

  • has_error: True/False
  • error: message/null
  • result: Success/Failure message.

Delete Alert

Delete alert by ID from Humio.

Inputs to this Action

  • Connection: Choose a connection that you have created.
  • Jinja Template for Repository: Jinja-templated text containing the value for repository. Example: {{repo_prefix_column_name}}-{{repo_suffix_column_name}}.
  • Alert ID: Column name from parent table to lookup value for alert ID. Example: This is {{id_column_name}}.

Output of Action
JSON containing the following items:

  • has_error: True/False
  • error: message/null
  • result: Success/Failure message.

Did this page help you?