Dynamic Mail send

[coffee_is_life1337]

Hello Forum,

i want to create dynamic mail notification.
The aggregation and query is all set.
The Mail-Template is set aswell and is working great.
But the problem is:
I need to use an email from the message(backlog) for the notification receiver
In Subject i can use the backlog-message and create a dynamic subject based on fields in message.
i need to use the same procedure for the notification receiver.

anyone who has accomplished that?,

best regards,
coffee_is_life1337

[gsmith]

Hello,

@coffee_is_life1337

I need to use an email from the message(backlog) for the notification receiver
In Subject

Is this similar to what you wanted to do?

Add the value of a backlog message field to Graylog email alert notification subject

Hi @gsmith Thanks for your answer. You are saying to do something like this? [imagen] The problem is that, even with that, Graylog don’t add the additional part of the title (the aggregation) to the subject of the email: [imagen] The only thing that I can think of to put the value of a field in the subject of an email, is to use the HTTP Notification on Graylog, and make a webhook to get the information of the alert with and automation tool, and send the email with that, but I think that…

[coffee_is_life1337]

Hi @gsmith,

i used the backlog message in “Subject” successfully.
now i want to use a value from backlog as “mail recipient” from a notification.

[aguida79 (Alejandro Guida)]

Hi @coffee_is_life1337. Con you explain how you succesfully used the backlog message in “Subject” of an email alert?

Thanks in advance.

[coffee_is_life1337]

Hello @aguida79,

you need to “open” the backlog message like you do in the message-field:
Subject: Testsubject for ${foreach backlog message}${message.fields.<field_you_want_to_use>}${end}

this should do it

//EDIT: make sure, you activate the Backlog-message in the alert-configuration:

best regards,
coffee_is_life1337

[aguida79 (Alejandro Guida)]

Thanks @coffee_is_life1337 ! It worked!

Regards,
Alejandro

[aguida79 (Alejandro Guida)]

It worked for the Email Subject, but not for the Alert Title,

For Alert Title, it only works when you make an Aggragation of 1, but the Alert Title with the “count” looks horrible:

Regards,
Alejandro

[gsmith]

@coffee_is_life1337

Thanks for sharing. This also worked for us