I have a question because I want to set a threshold for my messages so that if I receive the same log file 5 times in a row within the last 10 minutes, I will get a notification. However, Graylog itself does not have this functionality, so I need to use the Alert Wizard plugin. Is it still usable with Graylog 6.0.3? Or does anyone have alternatives?
What do you mean 5 in a row, why cant you just do an aggregstion alert of 10 minutes and aggregration is count >=5 ?
For example, it will only show me how much it has exceeded the threshold. However, if the log with the query appears five times in the last 10 minutes, a notification should be sent out.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.