# Email Notification - full\_message

**URL:** <https://community.graylog.org/t/email-notification-full-message/2191>\
**Category:** Graylog Central (peer support)\
**Created:** [August 23, 2017, 12:37am UTC](https://community.graylog.org/t/email-notification-full-message/2191 "2017-08-23T00:37:40Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![lmuir](https://avatars.discourse-cdn.com/v4/letter/l/e56c9b/32.png) [@lmuir](https://community.graylog.org/u/lmuir)\
**Post date:** [August 23, 2017, 12:37am UTC](https://community.graylog.org/t/email-notification-full-message/2191/1 "2017-08-23T00:37:40Z")

</div>

Hello,  
I am running a 3 node cluster, version 2.3.0.

I am receiving GELF messages from Windows event log. The messages I am interested in are .Net errors, so I need the content of full\_message to be included in the email notification.

I added the following the the email callback alert -

> Full Message:  
> ${message.fields.full\_message}

However when an email is triggered there is no full\_message -

> Full Message:

Any ideas?

Thanks,  
Lachlan.

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [August 23, 2017, 6:41am UTC](https://community.graylog.org/t/email-notification-full-message/2191/2 "2017-08-23T06:41:59Z")

</div>

What’s the complete email template you’re using?

---

<div class="post-metadata">

**Author:** ![lmuir](https://avatars.discourse-cdn.com/v4/letter/l/e56c9b/32.png) [@lmuir](https://community.graylog.org/u/lmuir)\
**Post date:** [August 24, 2017, 11:38pm UTC](https://community.graylog.org/t/email-notification-full-message/2191/3 "2017-08-24T23:38:45Z")

</div>

body: ##########  
Alert Description: {check\_result.resultDescription} Date: {check\_result.triggeredAt}  
Stream ID: {stream.id} Stream title: {stream.title}  
Stream description: {stream.description} Alert Condition Title: {alertCondition.title}  
{if stream\_url}Stream URL: {stream\_url}${end}

Triggered condition: ${check\_result.triggeredCondition}

Source: ${message.source}

Message: ${message}

##########

${message.fields.full\_message}

##########

{if backlog}Last messages accounting for this alert: {foreach backlog message}${message}

{end}{else}  
{end} email\_receivers: \_removed\_ sender: \_removed\_ subject: Graylog alert for stream: {stream.title}: ${check\_result.resultDescription}  
user\_receivers:

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [August 25, 2017, 8:07am UTC](https://community.graylog.org/t/email-notification-full-message/2191/4 "2017-08-25T08:07:51Z")

</div>

There you have it. There is no single `message` object in the templates. You have to iterate over the `backlog` collection with `foreach` (see lower part of your template) to access each message in it.

Please read [http://docs.graylog.org/en/2.3/pages/streams/alerts.html#email-alert-notification](http://docs.graylog.org/en/2.3/pages/streams/alerts.html#email-alert-notification) for details.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [September 8, 2017, 8:14am UTC](https://community.graylog.org/t/email-notification-full-message/2191/5 "2017-09-08T08:14:27Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
