Email notification winlogbeat

Graylog Central (peer support)
,
1

Hi. I made this template:

Stream title: {stream.title} Alert Condition Title: {alertCondition.title}

Date: {check_result.triggeredAt} Source:{source}
Login:${message.fields.winlogbeat_event_data_TargetUserName}

{if stream_url} Stream URL: {stream_url}${end}

Login: {foreach backlog message}${message.winlogbeat_event_data_TargetUserName}

{if backlog}Last messages accounting for this alert: {foreach backlog message}${message}

{end}{else}
${end}

But "winlogbeat_event_data_TargetUserName’ wasn’t showed. What I did wrong?
Thank you

2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.