Email notification winlogbeat

Graylog Central (peer support)
,
1

Hi. I made this template:

Stream title: ${stream.title}
Alert Condition Title: ${alertCondition.title}

Date: ${check_result.triggeredAt}
Source:${source}
Login:${message.fields.winlogbeat_event_data_TargetUserName}

${if stream_url}
Stream URL: ${stream_url}${end}

Login: {foreach backlog message}${message.winlogbeat_event_data_TargetUserName}

${if backlog}Last messages accounting for this alert:
${foreach backlog message}${message}

${end}${else}
${end}

But "winlogbeat_event_data_TargetUserName’ wasn’t showed. What I did wrong?
Thank you

2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.