I am using Graylog 2.4.3 and have installed it from an OVA. I have tried to configure several alerts and I can’t seem to get them to trigger and the condition is there. I have followed the instructions in the docs with no luck. It seems simple enough? I have the stream configured, the stream rule configured, I’m alerting on that stream with a message count alert, notifications are configured. I have tested the packet against the stream and it will use that stream. I have restarted it several times. Please let me know what logs I can provide.
The “test” notifications are working and are delivered via smtp.