--- title: "Graylog MCP server for AI agents - actionlake" description: "Give Claude 662 Graylog actions through one MCP server: system lookup, streams. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/graylog updated: 2026-10-23 --- Connectors · Developer & infrastructure # Graylog MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Graylog and the rest of your systems. It gives your agent 662 Graylog actions (397 reads, 186 writes and 79 that wait for a confirmation) and holds the Graylog credential itself, so the agent never does. It paces Graylog's limits and records every call. [Connect Graylog free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "graylog.users.get_page", intent: "check which Graylog account is connected" } # Get paginated list of users · read · 1 upstream call ``` - 662 actions in one signed file - 397 read look, never change - 186 write create and update - 79 wait for a yes destructive, confirmed first Set up ## Connect Graylog in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Graylog. Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `access_token` Graylog access token - `host` Where your Graylog lives: your host ``` account { op: "connections.requirements", service: "graylog" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "graylog.users.get_page" } # get paginated list of users · read · 1 upstream call check { action: "graylog.users.create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Graylog at a glance **Sign-in** Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `access_token` **Setup fields** `host` **Limits we pace to** 10 calls a second, per connection **API covered** Graylog 7.2.1+25725f2 REST API (OpenAPI 3.1, served at /api/openapi), at your Graylog instance's API base URL, which you enter when connecting **Built from** Graylog's documentation, read 23 October 2026[GitHub](https://github.com/Graylog2/graylog2-server/blob/7.2.1/graylog2-server/src/main/java/org/graylog2/shared/rest/documentation/openapi/OpenApiResource.java) [go2docs.graylog.org](https://go2docs.graylog.org/current/setting_up_graylog/rest_api.html) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 317 of 397 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 2, so ask can line Graylog up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Graylog. 662 actions in 162 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **397** read look, never change - **186** write create and update - **79** destructive wait for a confirmation 1. ### System lookup 25 15 read · 6 write · 4 destructive List available data adapters · List available caches · Create a new data adapter · Create a new cache 2. ### Streams 20 10 read · 8 write · 2 destructive Get a paginated list of streams · Create a stream · Get a single stream · Update a stream 3. ### Events definitions 19 8 read · 9 write · 2 destructive Get a paginated list of event definitions · Create new event definition · Get an event definition · Update existing event definition 4. ### Tools 18 18 read · 0 write · 0 destructive Split and index test (tools) · Test contains string (tools) · Test grok (tools) · Test json (tools) 5. ### Users 18 7 read · 6 write · 5 destructive Get paginated list of users · Create a new user account · Get user details by userId · Modify user details 6. ### Pipelines rules 14 10 read · 3 write · 1 destructive Create a processing rule from source · Get function descriptors · Get all processing rules · Retrieve the named processing rules in bulk 7. ### Indexer indices 13 10 read · 1 write · 2 destructive Get information of all specified indices and their shards · Reopen a closed index. This will also trigger an index ranges rebuild job · List all open, closed and reopened indices · Get a list of closed indices that can be reopened 8. ### System content packs 12 7 read · 2 write · 3 destructive Upload a content pack · Install a revision of a content pack · Download a revision of a content pack · Get a revision of a content pack **154 more areas · 523 actions** - System inputs **12** - Pipelines pipelines **10** - Sidecar configurations **10** - Datanode **9** - Events notifications **9** - Search **9** - System index sets **9** - Roles **8** - Sidecar collectors **8** - System grok **8** - Views **8** - Authorization roles **7** - Collectors fleets **7** - Stream rules **7** - System **7** - System authentication services backends **7** - System index sets templates **7** - System notifications **7** - Aws **6** - Cluster **6** - Collectors **6** - Events **6** - Extractors **6** - Pipelines rulebuilder **6** - Sidecar **6** - Sidecar configuration variables **6** - Stream destinations filters **6** - System index sets field type profiles **6** - System indexer indices **6** - System input states **6** - System outputs **6** - System stats **6** - Collectors sources **5** - Data node rolling restart **5** - Search decorators **5** - System deflector **5** - System field types **5** - System index ranges **5** - System jobs **5** - System metrics **5** - Authorization shares **4** - Cluster debug support bundle **4** - Cluster input state **4** - Cluster system loggers **4** - Collectors config **4** - Data nodes API **4** - Data nodes rest API **4** - Datanode upgrade **4** - Entity lists **4** - Indexer indices templates **4** - Migration **4** - Op amp enrollment **4** - Pipelines connections **4** - Search simple **4** - Stream outputs **4** - System cluster **4** - System cluster config **4** - System debug events **4** - System debug support bundle **4** - System index sets types **4** - System loggers **4** - System notification message **4** - System URL allowlist **4** - Authorization capabilities **3** - Aws cloud trail **3** - Aws kinesis auto **3** - Cluster deflector **3** - Cluster jobs **3** - Cluster node metrics **3** - Content stream **3** - Favorite fields **3** - Favorites **3** - Field types **3** - Indexer cluster **3** - Messages **3** - Onboarding **3** - Search export **3** - Stream destinations filters builder **3** - System catalog **3** - System cluster stats **3** - System inputs types **3** - System mongodb **3** - System processing **3** - System sessions **3** - Telemetry **3** - Ca **2** - Client certificates **2** - Cluster processing **2** - Cluster processing status **2** - Indexer failures **2** - Indexer overview **2** - Search jobs **2** - Search metadata **2** - Search suggestions **2** - Sidecar administration **2** - Sidecar collector actions **2** - Start page **2** - Static fields **2** - System authentication HTTP header auth config **2** - System authentication services configuration **2** - System authentication services test **2** - System configuration **2** - System getting started guides **2** - System indices retention **2** - System indices rotation **2** - System message processors **2** - System permissions **2** - System processing status **2** - Authorization grants overview **1** - Aws config **1** - Certificate renewal **1** - Certificates **1** - Cluster journal **1** - Cluster load balancers **1** - Cluster lookup table **1** - Cluster metrics **1** - Cluster plugins **1** - Collectors activity **1** - Dashboards **1** - Enterprise **1** - Entity scope **1** - Entity suggestions **1** - Events entity types **1** - Hello world **1** - Legacy search absolute **1** - Legacy search keyword **1** - Legacy search relative **1** - Pipelines processing load **1** - Pipelines simulator **1** - Quick jump **1** - Search functions **1** - Search pivot export **1** - Search query strings **1** - Search saved **1** - Search validation **1** - Stream routing rules **1** - Stream rules inputs **1** - Streams metrics **1** - System authentication services **1** - System cluster traffic **1** - System codecs types **1** - System datanodes **1** - System fields **1** - System index set defaults **1** - System journal **1** - System load balancers **1** - System messages **1** - System opensearch **1** - System plugins **1** - System search version **1** - System service manager **1** - System throughput **1** - Token usage **1** - Views qualifying views **1** Top actions ## The Graylog API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 27 of Graylog's 27 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `graylog.users.get_page` Get paginated list of users | Get paginated list of users. | read | `identity.user.list` 474 connectors | | `graylog.authorization_roles.get_list` Get a paginated list of all roles | Get a paginated list of all roles. | read | `identity.role.list` 184 connectors | | `graylog.users.create` Create a new user account | Create a new user account. | write | `identity.user.create` 262 connectors | | `graylog.users.delete` Removes a user account | Removes a user account. | destructive | `identity.user.delete` 253 connectors | | `graylog.authorization_roles.get` Get a single role | Get a single role. | read | `identity.role.get` 127 connectors | | `graylog.events_definitions.get_page` Get a paginated list of event definitions | Get a paginated list of event definitions. | read | `monitoring.monitor.list` 32 connectors | | `graylog.events_definitions.create` Create new event definition | Create new event definition. | write | `monitoring.monitor.create` 27 connectors | | `graylog.events_notifications.get_page` Get a paginated list of event notifications | Get a paginated list of event notifications. | read | `monitoring.notification_channel.list` 18 connectors | | `graylog.events_notifications.create` Create new notification definition | Create new notification definition. | write | `monitoring.notification_channel.create` 16 connectors | | `graylog.dashboards.views` Get a list of all dashboards | Get a list of all dashboards. | read | `monitoring.dashboard.list` 15 connectors | | `graylog.streams.get_page` Get a paginated list of streams | Get a paginated list of streams. | read | `monitoring.log_stream.list` 12 connectors | | `graylog.streams.create` Create a stream | Create a stream. | write | `monitoring.log_stream.create` 8 connectors | Try it ## Prompts to paste into Claude. Each one names the Graylog actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Who has access in Graylog? List every user and their role. calls `graylog.users.get_page` 2. Write write Create a new user account in Graylog. Show me exactly what you will send before you save it. calls `graylog.users.create` Governance for Graylog ## Destructive actions wait for a yes. 79 Graylog actions are destructive. The first 10: - Removes a user account `graylog.users.delete` - Delete a role `graylog.authorization_roles.delete` - Delete event definition `graylog.events_definitions.delete` - Delete a notification `graylog.events_notifications.delete` - Delete a stream `graylog.streams.delete` - Remove the named role and dissociate any users from it `graylog.roles.delete` - Delete view `graylog.views.delete` - Shutdown (system) `graylog.system.shutdown` - Shutdown (cluster) `graylog.cluster.shutdown` - Add a user to a role `graylog.roles.add_member` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do graylog.users.delete confirm_policy: **human** Removes a user account? **intent:** the user asked me to removes a user account run suspended · waiting for a named person · key _graylog-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "graylog-agent", allowed_actions: ["graylog.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "graylog.users.delete", approver: "lead@example.com" }, { match: "graylog.authorization_roles.delete", approver: "lead@example.com" }, { match: "graylog.events_definitions.delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Graylog only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Graylog costs on actionlake. Every Graylog action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Graylog refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 662 Graylog actions - 662 actions page each page of a long list is one call - 317 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Graylog action. 662 actions by area: the id your agent calls, what it does, and its effect. **System lookup 25** - `graylog.system_lookup.adapters` List available data adapters read - `graylog.system_lookup.caches` List available caches read - and 23 more in this area **Streams 20** - `graylog.streams.create` Create a stream write - `graylog.streams.get_page` Get a paginated list of streams read - and 18 more in this area **Events definitions 19** - `graylog.events_definitions.create` Create new event definition write - `graylog.events_definitions.get` Get an event definition read - and 17 more in this area **Tools 18** - `graylog.tools.split_and_index_test` Split and index test (tools) read - `graylog.tools.test_contains_string` Test contains string (tools) read - and 16 more in this area **Users 18** - `graylog.users.change_user` Modify user details write - `graylog.users.create` Create a new user account write - and 16 more in this area **Pipelines rules 14** - `graylog.pipelines_rules.create_from_parser` Create a processing rule from source write - `graylog.pipelines_rules.function_descriptors` Get function descriptors read - and 12 more in this area **Indexer indices 13** - `graylog.indexer_indices.all` List all open, closed and reopened indices read - `graylog.indexer_indices.closed` Get a list of closed indices that can be reopened read - and 11 more in this area **System content packs 12** - `graylog.system_content_packs.create_content_pack` Upload a content pack write - `graylog.system_content_packs.download_content_pack_revisions` Download a revision of a content pack read - and 10 more in this area **System inputs 12** - `graylog.system_inputs.create` Launch input on this node write - `graylog.system_inputs.get_page` Get a paginated list of inputs read - and 10 more in this area **Pipelines pipelines 10** - `graylog.pipelines_pipelines.create_from_parser` Create a processing pipeline from source write - `graylog.pipelines_pipelines.get_all` Get all processing pipelines read - and 8 more in this area **Sidecar configurations 10** - `graylog.sidecar_configurations.copy_configuration` Copy a configuration write - `graylog.sidecar_configurations.create_configuration` Create new configuration write - and 8 more in this area **Datanode 9** - `graylog.datanode.bulk_start` Start multiple nodes in the cluster write - `graylog.datanode.bulk_stop` Stop multiple nodes in the cluster write - and 7 more in this area **Events notifications 9** - `graylog.events_notifications.create` Create new notification definition write - `graylog.events_notifications.get` Get a notification read - and 7 more in this area **Search 9** - `graylog.search.create_search_v2` Create a search query write - `graylog.search.execute_query` Execute the referenced search query asynchronously write - and 7 more in this area **System index sets 9** - `graylog.system_index_sets.get` Get index set read - `graylog.system_index_sets.global_stats` Get stats of all index sets read - and 7 more in this area **Roles 8** - `graylog.roles.create` Create a new role write - `graylog.roles.get_members` Retrieve the role's members read - and 6 more in this area **Sidecar collectors 8** - `graylog.sidecar_collectors.copy_collector` Copy a collector write - `graylog.sidecar_collectors.create_collector` Create a new collector write - and 6 more in this area **System grok 8** - `graylog.system_grok.bulk_update_patterns` Add a list of new patterns write - `graylog.system_grok.create_pattern` Add a new named pattern write - and 6 more in this area **Views 8** - `graylog.views.create` Create a new view write - `graylog.views.duplicate` Duplicate an existing view write - and 6 more in this area **Authorization roles 7** - `graylog.authorization_roles.delete` Delete a role destructive - `graylog.authorization_roles.get` Get a single role read - and 5 more in this area **Collectors fleets 7** - `graylog.collectors_fleets.bulk_stats` Get statistics for all fleets read - `graylog.collectors_fleets.create` Create a new fleet write - and 5 more in this area **Stream rules 7** - `graylog.stream_rules.create` Create a stream rule write - `graylog.stream_rules.get` Get a single stream rules read - and 5 more in this area **System 7** - `graylog.system.get_metrics` Get metrics for multiple inputs read - `graylog.system.jvm` Get JVM information read - and 5 more in this area **System authentication services backends 7** - `graylog.system_authentication_services_backends.create` Creates a new authentication service backend write - `graylog.system_authentication_services_backends.get` Returns the authentication service backend for the given ID read - and 5 more in this area **System index sets templates 7** - `graylog.system_index_sets_templates.built_ins` Gets built-in templates read - `graylog.system_index_sets_templates.create` Creates a new editable template write - and 5 more in this area **System notifications 7** - `graylog.system_notifications.bulk_delete` Bulk delete notifications by their IDs destructive - `graylog.system_notifications.get_count` Get the count of active system notifications read - and 5 more in this area **Aws 6** - `graylog.aws.create` Create a new AWS input write - `graylog.aws.get_kinesis_streams` Get all available Kinesis streams for the specified region read - and 4 more in this area **Cluster 6** - `graylog.cluster.cluster_process_buffer_dump` Get a process buffer dump of all cluster nodes read - `graylog.cluster.get` Get system overview of all Graylog nodes read - and 4 more in this area **Collectors 6** - `graylog.collectors.find_instances` Get a paginated list of collector instances read - `graylog.collectors.get_instance` Get a collector instance read - and 4 more in this area **Events 6** - `graylog.events.filter_options` Get the available values for the given event fields read - `graylog.events.get` Get event by ID read - and 4 more in this area Extractors **6** Pipelines rulebuilder **6** Sidecar **6** Sidecar configuration variables **6** Stream destinations filters **6** System index sets field type profiles **6** System indexer indices **6** System input states **6** System outputs **6** System stats **6** Collectors sources **5** Data node rolling restart **5** Search decorators **5** System deflector **5** System field types **5** System index ranges **5** System jobs **5** System metrics **5** Authorization shares **4** Cluster debug support bundle **4** Cluster input state **4** Cluster system loggers **4** Collectors config **4** Data nodes API **4** Data nodes rest API **4** Datanode upgrade **4** Entity lists **4** Indexer indices templates **4** Migration **4** Op amp enrollment **4** Pipelines connections **4** Search simple **4** Stream outputs **4** System cluster **4** System cluster config **4** System debug events **4** System debug support bundle **4** System index sets types **4** System loggers **4** System notification message **4** System URL allowlist **4** Authorization capabilities **3** Aws cloud trail **3** Aws kinesis auto **3** Cluster deflector **3** Cluster jobs **3** Cluster node metrics **3** Content stream **3** Favorite fields **3** Favorites **3** Field types **3** Indexer cluster **3** Messages **3** Onboarding **3** Search export **3** Stream destinations filters builder **3** System catalog **3** System cluster stats **3** System inputs types **3** System mongodb **3** System processing **3** System sessions **3** Telemetry **3** Ca **2** Client certificates **2** Cluster processing **2** Cluster processing status **2** Indexer failures **2** Indexer overview **2** Search jobs **2** Search metadata **2** Search suggestions **2** Sidecar administration **2** Sidecar collector actions **2** Start page **2** Static fields **2** System authentication HTTP header auth config **2** System authentication services configuration **2** System authentication services test **2** System configuration **2** System getting started guides **2** System indices retention **2** System indices rotation **2** System message processors **2** System permissions **2** System processing status **2** Authorization grants overview **1** Aws config **1** Certificate renewal **1** Certificates **1** Cluster journal **1** Cluster load balancers **1** Cluster lookup table **1** Cluster metrics **1** Cluster plugins **1** Collectors activity **1** Dashboards **1** Enterprise **1** Entity scope **1** Entity suggestions **1** Events entity types **1** Hello world **1** Legacy search absolute **1** Legacy search keyword **1** Legacy search relative **1** Pipelines processing load **1** Pipelines simulator **1** Quick jump **1** Search functions **1** Search pivot export **1** Search query strings **1** Search saved **1** Search validation **1** Stream routing rules **1** Stream rules inputs **1** Streams metrics **1** System authentication services **1** System cluster traffic **1** System codecs types **1** System datanodes **1** System fields **1** System index set defaults **1** System journal **1** System load balancers **1** System messages **1** System opensearch **1** System plugins **1** System search version **1** System service manager **1** System throughput **1** Token usage **1** Views qualifying views **1** This index shows a sample of each area. All 662 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search. Questions ## The Graylog MCP server, answered. **Is there a Graylog MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 662 Graylog actions across system lookup, streams, events definitions and tools, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Graylog. **What do I need to connect Graylog?** Graylog access token. Plus your host. The free call account { op: "connections.requirements", service: "graylog" } lists exactly what to paste. **Can an AI agent delete or change things in Graylog?** Only if its key allows it, and only with an explicit confirmation. 79 Graylog actions are destructive, including removes a user account, delete a role and delete event definition. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Graylog API limit?** actionlake paces every call to the limits in the Graylog service file: 10 calls a second per connection. Repeated reads are answered from cache (317 Graylog actions can be), which never reaches Graylog. **What does a Graylog action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (662 Graylog actions page). Cache hits, searches, dry runs and calls Graylog refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Graylog API does it cover?** The Graylog 7.2.1+25725f2 REST API (OpenAPI 3.1, served at /api/openapi) at your Graylog instance's API base URL, which you enter when connecting. It is built from Graylog's documentation as read on 23 October 2026. 662 actions in 162 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Graylog data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Graylog credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Graylog Shares the most action names with - [Sumo Logic 13](https://actionlake.com/connectors/sumo-logic) - [Splunk Platform 8](https://actionlake.com/connectors/splunk-platform) - [ClickHouse Cloud 8](https://actionlake.com/connectors/clickhouse-cloud) - [Pulumi Cloud 7](https://actionlake.com/connectors/pulumi-cloud) - [Veeam Backup & Replication 6](https://actionlake.com/connectors/veeam-backup-and-replication) - [Spacelift 6](https://actionlake.com/connectors/spacelift) Joins with, on shared entities - [HaloPSA 2](https://actionlake.com/connectors/halopsa) - [Microsoft 365 Users 2](https://actionlake.com/connectors/microsoft-365-users) - [Fortinet FortiGate 2](https://actionlake.com/connectors/fortinet-fortigate) - [Genesys Cloud CX 2](https://actionlake.com/connectors/genesys-cloud-cx) - [Rubrik Security Cloud 2](https://actionlake.com/connectors/rubrik-security-cloud) - [Commvault Cloud 2](https://actionlake.com/connectors/commvault-cloud) Browse - [All Developer & infrastructure connectors](https://actionlake.com/connectors/category/developer-and-infrastructure) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Graylog; the name is the vendor's own. Counts are from the Graylog service file, version 1.0.0. ## Give your agent Graylog today. [Connect Graylog free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/graylog More: https://actionlake.com/llms.txt