Coralogix
Send alerts, malware logs, and application data from SURF to Coralogix.
Before you start
| Requirement | Detail |
|---|---|
| SURF access | Administrator on the SURF Admin console |
| Coralogix access | An account with rights to create an API key under Data Flow |
Step 1: Find your Coralogix endpoint URL
The URL depends on the region your Coralogix account runs in. The full list is at https://coralogix.com/docs/coralogix-endpoints/, under the Logs table.
Most EU accounts use:
https://ingress.eu2.coralogix.com/logs/rest/singlesConfirm against the endpoints table rather than assuming.
Step 2: Create the Coralogix API key
- Log in to your Coralogix account.
- Select API Keys under the Data Flow menu.
- Create a New Key under Send Your Data.
- Copy the token.
Step 3: Configure the integration in SURF
- Open the SURF Admin dashboard and go to the Integrations page.
- Select Coralogix.
- Complete the setup dialog:
| Field | Value |
|---|---|
| URL | The regional endpoint from Step 1 |
| Token | The key created in Step 2 |
| Data to send | Tick the data types required: Alerts, Malware Logs, Applications |
- Click Submit.
- Enable the integration in the integrations list.
Troubleshooting
| Symptom | Check |
|---|---|
| No data arriving in Coralogix | Wrong regional endpoint. Confirm against the Coralogix endpoints documentation. |
| Authentication rejected | The key was created under the wrong section. It must be a Send Your Data key, not another API key type. |
| Some data types missing | The corresponding box was not ticked under Data to send |
| Configuration saved but nothing sends | The integration was submitted but left toggled off in the integrations list |
For anything not covered here, contact the SURF support team.