Skip to main content

Overview

Observability tools connect IncidentFox to your monitoring stack including Grafana, Datadog, Coralogix, and New Relic.

Grafana Tools

grafana_query_prometheus

Query Prometheus metrics via Grafana. Parameters:
ParameterTypeRequiredDescription
querystringYesPromQL query
startstringNoStart time
endstringNoEnd time
stepstringNoQuery step
Example:
@incidentfox query prometheus for rate(http_requests_total[5m]) by service

grafana_get_dashboard

Get dashboard panels and data. Parameters:
ParameterTypeRequiredDescription
dashboard_uidstringYesDashboard UID

grafana_get_alerts

Check alert status. Parameters:
ParameterTypeRequiredDescription
statestringNoalerting, ok, pending

Datadog Tools

query_datadog_metrics

Query Datadog metrics. Parameters:
ParameterTypeRequiredDescription
querystringYesDatadog metric query
fromintNoStart time (Unix)
tointNoEnd time (Unix)
Example:
@incidentfox query datadog for avg:system.cpu.user{service:checkout}

search_datadog_logs

Search Datadog logs. Parameters:
ParameterTypeRequiredDescription
querystringYesLog search query
fromstringNoStart time
tostringNoEnd time
limitintNoMax results

get_service_apm_metrics

Get APM metrics for a service. Parameters:
ParameterTypeRequiredDescription
servicestringYesService name
envstringNoEnvironment

Coralogix Tools

search_coralogix_logs

Search logs in Coralogix. Parameters:
ParameterTypeRequiredDescription
querystringYesLucene query
applicationstringNoApplication filter
subsystemstringNoSubsystem filter
start_timestringNoStart time
end_timestringNoEnd time
Example:
@incidentfox search coralogix for "error" AND "timeout" in payments application

get_coralogix_metrics

Query Coralogix metrics. Parameters:
ParameterTypeRequiredDescription
metric_namestringYesMetric name
aggregationstringNosum, avg, max
filtersdictNoLabel filters

get_coralogix_alerts

Get recent alerts from Coralogix. Parameters:
ParameterTypeRequiredDescription
severitystringNoSeverity filter
statusstringNoactive, resolved

New Relic Tools

query_newrelic_nrql

Run NRQL queries. Parameters:
ParameterTypeRequiredDescription
querystringYesNRQL query
account_idstringNoAccount ID
Example:
SELECT count(*) FROM Transaction
WHERE appName = 'checkout'
FACET error.class
SINCE 1 hour ago

get_apm_summary

Get APM summary for an application. Parameters:
ParameterTypeRequiredDescription
app_namestringYesApplication name

Anomaly Detection Tools

These tools use Prophet and statistical methods:

detect_anomalies

Detect anomalies in metric data. Parameters:
ParameterTypeRequiredDescription
metric_datalistYesTime series data
sensitivityfloatNoDetection sensitivity

correlate_metrics

Find correlations between metrics. Parameters:
ParameterTypeRequiredDescription
metricslistYesMetric queries
time_rangestringNoTime range

find_change_points

Identify change points in metrics. Parameters:
ParameterTypeRequiredDescription
metric_datalistYesTime series data

Use Cases

Cross-Platform Investigation

@incidentfox investigate high latency using Grafana and Coralogix data
IncidentFox will:
  1. grafana_query_prometheus - Get latency metrics
  2. search_coralogix_logs - Find error patterns
  3. correlate_metrics - Link to other services
  4. detect_anomalies - Identify unusual patterns

Alert Investigation

@incidentfox get context for the Datadog alert on checkout service

Configuration

{
  "tools": {
    "grafana": {
      "enabled": true,
      "url": "https://grafana.company.com",
      "api_key": "vault://secrets/grafana-key"
    },
    "datadog": {
      "enabled": true,
      "api_key": "vault://secrets/dd-api-key",
      "app_key": "vault://secrets/dd-app-key"
    },
    "coralogix": {
      "enabled": true,
      "api_key": "vault://secrets/coralogix-key",
      "domain": "coralogix.com"
    }
  }
}

Next Steps