Coralogix agent skills for Claude Code, Cursor and RevampKey

4 ready-made playbooks that teach an AI agent how to do real Coralogix work: which tools to call, what to check first, and when to stop and ask you.

Download RevampKey, free I have it: connect Coralogix

Connect Coralogix once and all 4 skills install themselves and stay up to date. Mac, Windows and Linux.

All 4 Coralogix skills

Each skill is one job. You ask in plain words and the agent loads the skill that matches, then follows its steps.

Start hereAsks before writing16 Coralogix tools

Use Coralogix with AI safely and well

Guides an AI agent through connecting to the right Coralogix tenant, bounding time ranges and queries, and asking before any alert or parsing rule changes.

Use it when

You are starting a Coralogix investigation and want the right tenant and time window first
You need to choose between logs, traces, metrics and alert tools
You want to make sure no alert or parsing rule changes without your approval

Tools it uses

get_datetime
get_logs_v1
read_dataprime_intro_docs_v1
get_traces_v1
metrics__list_v1
metrics__metric_details_v1
metrics__range_query_v1
read_metrics_guidelines_v1
get_schemas_v1
list_incidents_v1
get_incident_details_v1
get_alert_event_details_v1
read_rum_log_intro_docs_v1
read_rum_sdk_docs_v1
manage_alerts
manage_parsing_rules

Example

Check the last hour of errors for the checkout service and tell me what you find, in the right tenant.

I'm connected to the eu1 tenant. For the last hour (14:05 to 15:05 UTC), checkout logs show 412 errors, 390 of them timeouts from the payments call. The top 3 error messages account for 371 of those. I did not change any alerts.

Use in RevampKeyRead the full skill →

Asks before writing2 Coralogix tools

Audit Coralogix alerts and parsing rules with AI

Reviews your Coralogix alerts and parsing rules for noise, silence, duplicates and coverage gaps, then proposes a numbered change list. It asks before changing any alert or parsing rule.

Use it when

A quarterly clean-up of alerts that fire too often or never
Checking whether a service that started logging has any alert covering it
Finding parsing rules that match nothing or overlap

Tools it uses

manage_alerts
manage_parsing_rules

Example

Audit our Coralogix alerts for the payments team. Find noisy and unused ones and tell me what you'd change, but don't touch anything yet.

I reviewed 38 alerts in the payments workspace over the last 90 days. Four are firing more than 20 times a day with no linked incident, and two have not fired at all because their query matches no current field. I found no alert covering the new refund service, which is logging about 1,200 lines an hour. I have listed six proposed changes for you to approve one by one; nothing has been modified.

Use in RevampKeyRead the full skill →

Asks before writing14 Coralogix tools

Review a Coralogix incident with AI

Works from a Coralogix incident or fired alert, separates symptom from likely cause, checks logs and traces around the start time, and writes a short review. It asks before changing any alert or incident.

Use it when

An alert fired overnight and you need to know what it was about
A Coralogix incident is still open and you want a timeline with evidence
You need a post-incident review that cites the telemetry behind each claim

Tools it uses

get_incident_details_v1
get_alert_event_details_v1
get_datetime
get_logs_v1
read_dataprime_intro_docs_v1
get_traces_v1
read_metrics_guidelines_v1
metrics__range_query_v1
metrics__list_v1
metrics__metric_details_v1
get_schemas_v1
list_incidents_v1
manage_alerts
manage_parsing_rules

Example

Review Coralogix incident INC-4821. What fired, what most likely caused it, and what would have caught it sooner?

INC-4821 ran from 02:14 to 02:51 UTC and fired the checkout p99 latency alert (threshold 2s, sustained for 5 minutes). Error logs for the payments service show a new timeout message appearing at 02:12, about two minutes before the alert, and the spike in slow traces points at one downstream call. Likely cause: a payment provider timeout change that began at 02:12, confidence medium. Nothing I found confirms a deploy at that time, so check your deploy log.

Use in RevampKeyRead the full skill →

Read-only4 Coralogix tools

Triage logs with DataPrime

Turns a reported problem into a short list of log error patterns, using bounded DataPrime queries over a chosen time window and service filter. It asks before changing anything.

Use it when

A service started returning errors and you need to know which error dominates
A customer reports a failure and you want the log lines tied to their request id
You want to check whether an error spike is new or background noise

Tools it uses

get_datetime
read_dataprime_intro_docs_v1
get_schemas_v1
get_logs_v1

Example

Find the errors in the checkout service since 14:00 UTC today and tell me which pattern is new.

Checkout logged 1,284 error lines between 14:00 and 16:00 UTC, against a baseline of about 40 per hour. Most of them (1,040) share one template: a payment gateway timeout. It first appears at 14:07, about six minutes after the 14:01 deploy I found in the window edges. The other 244 lines are retry noise from a call that later succeeds.

Use in RevampKeyRead the full skill →

Get all 4 without copying a file

RevampKey adds the skills when you connect Coralogix, updates them for you and removes them when you disconnect.

Download RevampKey

How Coralogix skills work

Connect Coralogix
The Coralogix MCP server gives the agent its tools.
Ask in plain words
“Audit our Coralogix alerts for the payments team. Find noisy and unused ones and tell me what you'd change, but don't touch anything yet.” Each SKILL.md says when it applies, so only the one that fits is loaded.
Approve any change
The agent calls the tools in order, checks its work, and shows you any change before it makes it.

How to install Coralogix skills

In RevampKey the skills install themselves when you connect Coralogix. In other tools each skill is one folder with a SKILL.md file, and you also need the Coralogix MCP server connected there.

About 1 minute · nothing to copy

Download RevampKey for Mac, Windows or Linux and sign in.
Open Connectors and connect Coralogix. All 4 skills come with it and stay up to date; they go away when you remove the connector.
Ask in plain language, for example “Audit our Coralogix alerts for the payments team. Find noisy and unused ones and tell me what you'd change, but don't touch anything yet.”
Download RevampKeyConnect Coralogix · 1 click
Get RevampKey to connect Coralogix
RevampKey is a free desktop app for Mac, Windows and Linux. Install it, sign in, and Coralogix is one click away with its skills already attached.
Download RevampKey
Not now? Use the skills in your current tool
for s in essentials alert-and-parsing-rule-audit incident-review log-triage-with-dataprime; do curl -fsSL --create-dirs -o .claude/skills/coralogix-$s/SKILL.md https://revampkey.com/marketplace/coralogix/skills/$s/SKILL.md done
Other tools

Into this project’s .claude/skills folder

Connect the Coralogix MCP server in Claude Code.

Run this in your project folder to add all 4 skills:

for s in essentials alert-and-parsing-rule-audit incident-review log-triage-with-dataprime; do
  curl -fsSL --create-dirs -o .claude/skills/coralogix-$s/SKILL.md https://revampkey.com/marketplace/coralogix/skills/$s/SKILL.md
done

Ask in plain language, for example “Audit our Coralogix alerts for the payments team. Find noisy and unused ones and tell me what you'd change, but don't touch anything yet.”

Into the shared .agents/skills folder

Connect the Coralogix MCP server in Cursor.

Run this in your project folder to add all 4 skills:

for s in essentials alert-and-parsing-rule-audit incident-review log-triage-with-dataprime; do
  curl -fsSL --create-dirs -o .agents/skills/coralogix-$s/SKILL.md https://revampkey.com/marketplace/coralogix/skills/$s/SKILL.md
done

Ask in plain language, for example “Audit our Coralogix alerts for the payments team. Find noisy and unused ones and tell me what you'd change, but don't touch anything yet.”

Into the shared .agents/skills folder

Connect the Coralogix MCP server in Codex.

Run this in your project folder to add all 4 skills:

for s in essentials alert-and-parsing-rule-audit incident-review log-triage-with-dataprime; do
  curl -fsSL --create-dirs -o .agents/skills/coralogix-$s/SKILL.md https://revampkey.com/marketplace/coralogix/skills/$s/SKILL.md
done

Ask in plain language, for example “Audit our Coralogix alerts for the payments team. Find noisy and unused ones and tell me what you'd change, but don't touch anything yet.”

Into the shared .agents/skills folder

Connect the Coralogix MCP server in VS Code.

Run this in your project folder to add all 4 skills:

for s in essentials alert-and-parsing-rule-audit incident-review log-triage-with-dataprime; do
  curl -fsSL --create-dirs -o .agents/skills/coralogix-$s/SKILL.md https://revampkey.com/marketplace/coralogix/skills/$s/SKILL.md
done

Ask in plain language, for example “Audit our Coralogix alerts for the payments team. Find noisy and unused ones and tell me what you'd change, but don't touch anything yet.”

RevampKey or copy the files?

In RevampKey

One click when you connect Coralogix
Updated for you when a skill improves
Removed when you disconnect
The MCP server is set up for you
800+ other connectors, same way

Download free

Copy into your project

One command per project
Run it again to get updates
You connect the Coralogix MCP server yourself
Works in Claude Code, Cursor, Codex and VS Code

See the command

Coralogix skills FAQ

What is a Coralogix agent skill?

A SKILL.md file: a short playbook an AI agent loads when your request matches it. Each Coralogix skill describes one job, which Coralogix tools to use in which order, what to check first and when to stop and ask you.

Do the Coralogix skills change anything on their own?

1 of the 4 only read. The others tell the agent to show you the change and wait for a yes before it creates, edits or deletes anything in Coralogix.

Which tools can use these skills?

Any agent that reads the open Agent Skills format: Claude Code, Cursor, Codex, VS Code with Copilot and RevampKey. In RevampKey they are attached when you connect Coralogix; elsewhere you copy the folders into your project or skills directory.

Do I need the Coralogix MCP server too?

Yes. The skills tell the agent how to do the work; the Coralogix MCP server gives it the tools to do it. The Coralogix MCP setup guide covers every client.

Coralogix MCP server setup · This page as Markdown

Put Coralogix’s best workflows in your agent

Download RevampKey, connect Coralogix and ask your first question in about a minute.

Download RevampKey Connect Coralogix · 1 click

All 4 Coralogix skills

Use Coralogix with AI safely and well

Use it when

Tools it uses

Audit Coralogix alerts and parsing rules with AI

Use it when

Tools it uses

Review a Coralogix incident with AI

Use it when

Tools it uses

Triage logs with DataPrime

Use it when

Tools it uses

Get all 4 without copying a file

How Coralogix skills work

How to install Coralogix skills

RevampKey or copy the files?

In RevampKey

Copy into your project

Coralogix skills FAQ

Put Coralogix’s best workflows in your agent

Skills for related tools