Alert ID in HTTP Alerts



Am I missing something, or is the actual Alert ID not in the HTTP notification body?

As in, I setup an alert condition with a HTTP notification, it triggers, and I can view the alert on the following (example) URL - http://graylog.server/alerts/5c607fadd09e7b04ba671946 - but the 5c607fadd09e7b04ba671946 attribute is not sent in the HTTP notification.

I am trying to capture the alert in a SOC tool (TheHive) and make it a clickable link back to Graylog but it does not seem to be sent.

(Konrad Merz) #2

As far as I can see, you are right. Can you please open a issue with detailed explanation. I will see that the alarm id is add to the request body.

Thanks a lot!