# Graylog

Log search, aggregation, and triggered-event inspection on Graylog.

Run these through `omni-cli` once a human has connected the platform (`omni-cli graylog login`). Full parameter and output schemas come from `omni-cli discovery graylog`.

## system

| Command | What it does | Kind |
|---|---|---|
| `omni-cli graylog cluster health` | Get indexer cluster health (green/yellow/red) and shard counts. | read |
| `omni-cli graylog system status` | Get node info, version, and lifecycle state. | read |

## events

| Command | What it does | Kind |
|---|---|---|
| `omni-cli graylog eventdefinition get` | Get one event/alert definition — its config query, streams, and group-by live here. | read |
| `omni-cli graylog eventdefinition list` | List event/alert definitions (discovers definition ids). | read |
| `omni-cli graylog events search` | Search triggered events and alerts. | read |

## search

| Command | What it does | Kind |
|---|---|---|
| `omni-cli graylog messages aggregate` | Aggregate log messages into grouped metrics (counts, percentiles) — triage before pulling raw. | read |
| `omni-cli graylog messages search` | Search raw log messages (scripting search API). | read |

## streams

| Command | What it does | Kind |
|---|---|---|
| `omni-cli graylog stream get` | Get a single stream's configuration and rules. | read |
| `omni-cli graylog stream list` | List streams (discovers stream ids to scope searches to). | read |