Hi Guys
In the email notification body template-
How can I filter the alert extractor fields in the message?
(if I want to include only specific extractor in the alert notification rather receive the all message)
Many Thanks!
1 Like
Hi,
check this please
Thanks!
But in my case the trigger is working as expected and I getting the event through email.
I want to filter the email body only to have certain fields .
1 Like
You will need to write your own template. Link below has all information required. It seems you should be looking at the backlog section.
https://docs.graylog.org/en/3.3/pages/alerts.html#notifications
First you need to enable backlog on the alert itself and set it to whatever amount of logs you want to display on your notification. Then on your template in the foreach loop going thru your backlogs you can write things like:
Log timestamp: ${message.timestamp}
Log source: ${message.source}
Log fieldX: ${message.fields.fieldX}
Log fieldY: ${message.fields.fieldY}
2 Likes
dleguizamon- Thank you so much!!
It did the magic!
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.