Coralogix

Connect Coralogix to CloudThinker for log search, metrics, traces, incident triage, and pipeline health investigation

Connect your Coralogix account to enable CloudThinker agents to search logs, query metrics and traces, triage incidents, and inspect data pipeline health across your observability stack.

Coralogix authenticates with an API key scoped to a region. CloudThinker resolves the right Coralogix endpoint from the region, so the same setup works across all US, EU, and AP data centers.

---

Supported regions

Pick the region that matches your Coralogix team login domain.

Data center	Regions
US	us1, us2, us3
Europe	eu1, eu2
Asia Pacific	ap1, ap2, ap3

---

Prerequisites

• A Coralogix account with access to the team you want to investigate.
• An API key with the read permissions for the observability data CloudThinker should reach.
• The region of your Coralogix team.

Use an API key with the least permissions needed for read-only investigation. CloudThinker’s setup verification only reads data — it never mutates Coralogix resources.

---

Setup

1. Open Coralogix

   Sign in to your Coralogix account. Your login URL follows the format https://<team>.app.<region>.coralogix.com — the <region> segment is your region.

2. Create an API key

   Go to Settings → Users and Teams → API Keys and click Add key:

   • Name: cloudthinker
   • Type: pick Team Key — it’s shared and stays valid even if the creating user’s access expires, unlike a Personal Key, which is tied to an individual and meant for testing
   • Permissions: grant the read permissions for the data CloudThinker should access

   Copy the key immediately — it may not be shown again.

3. Add the connection in CloudThinker

   Navigate to Connections → Coralogix and enter:

   • API Key: the key you just created
   • Region: the region from your login URL (e.g. eu2)

   Click Connect. CloudThinker verifies the credentials and shows a Connected status.

Copy the API key immediately after creation. You’ll need to create a new key if it’s lost.

---

Connection details

Field	Description	Example
CORALOGIX_API_KEY	Coralogix API key	—
CORALOGIX_REGION	Region from your team login domain	us2

CloudThinker derives the Coralogix API endpoint from the region, so no manual URL configuration is required.

---

Required permissions

Grant the API key the read permissions for the observability data CloudThinker investigates — logs, metrics, traces, incidents, alerts, connectors, parsing rules, presets, and dashboards.

Follow least privilege: a read-only key is enough for investigation. Keep mutating permissions off the key CloudThinker uses unless a write workflow specifically requires them.

---

Agent capabilities

Once connected, agents have read access to your Coralogix observability data.

Capability	Description
Discovery	Summarize account health — active incidents, connector count, disabled parsing rules, and metric no-match handling
Incident triage	List and inspect active incidents and their context
Logs	Search and analyze logs over a time window
Metrics	Query metrics and inspect the metric catalog
Traces	Inspect distributed traces
Pipeline health	Review connectors, parsing rules, and presets for misconfiguration
Alerts & dashboards	Inspect alert definitions and dashboards

Verify the connection

@alex run Coralogix discovery and summarize active incidents, connector count, disabled parsing rule count, and whether metric no-match handling is healthy

Example prompts

@alex triage active Coralogix incidents and #report anything affecting production
@alex search Coralogix logs for 5xx errors in the api-gateway over the last hour
@alex check Coralogix pipeline health and list any disabled parsing rules

For large or noisy catalogs, scope requests with short time windows and a known metric or log query so the agent returns focused results.

---

Troubleshooting

401 or 403 Unauthorized

The API key is missing, expired, or lacks the required permissions. Create a new Coralogix API key with the needed read permissions and reconnect.

404 Not Found

The API key belongs to a different Coralogix region. Check your team login domain and update CORALOGIX_REGION to match.

No metrics found

The metric catalog has no matching metric, or the account has no metric data. Treat it as an empty result, then try a known metric name or continue with incidents and logs.

Discovery shows degraded status

One or more Coralogix list calls returned an error. Check the API key permissions and region, then rerun discovery.

Large or noisy output

Unbounded catalog or query usage returns too much data. Scope requests with short time windows and specific queries so results stay focused.

---

Security

• Least privilege — grant only the permissions the agents need for your use case; start read-only and widen later.
• Read-only by default — use read-only credentials unless you want agents to make changes through this connection.
• Rotate credentials — rotate keys and tokens on your normal schedule; CloudThinker picks up the new value when you update the connection.
• Revoke on offboarding — remove the credential at the provider when you delete a connection or a teammate leaves.

• Correct region — match the API key’s region to the Coralogix team login domain; mismatched regions cause 404 failures.

---

Related

Datadog Connection

Log search, metrics, and monitoring

Better Stack Connection

Uptime, incidents, and log search