email Notification message problems

Graylog Central (peer support)
1

Graylog version: v6.0.2

The following are the messages collected by Linux rsyslog forward to Graylog Server

2024-07-15 13:48:05.000 FS01
FS01 sshd[12670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.1.2.50 user=test

I want the Source IP and User information to be displayed on the email Notification message

${foreach backlog message}

Host： ${message.source} Host IP： ${message.fields.gl2_remote_ip} Source IP：${message.rhost} User： ${message.user} Message： ${message}

G01
G011400×480 22.7 KB

G02
G021230×259 9.2 KB

G03
G03915×427 123 KB

Please tell me how to present this, thanks！

2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.