# Email Template Backlog

**URL:** <https://community.graylog.org/t/email-template-backlog/14634>\
**Category:** Graylog Central (peer support)\
**Created:** [March 25, 2020, 9:31am UTC](https://community.graylog.org/t/email-template-backlog/14634 "2020-03-25T09:31:46Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![IIdikII](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/iidikii/32/6067_2.png) [@IIdikII](https://community.graylog.org/u/IIdikII)\
**Post date:** [March 25, 2020, 9:31am UTC](https://community.graylog.org/t/email-template-backlog/14634/1 "2020-03-25T09:31:46Z")

</div>

Hi,i want to configure an alert from filebeat, when the alert is triggered an email is sent  
with the error and some lines (10/20 rows) after that.  
How can i do that?

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [March 25, 2020, 10:30am UTC](https://community.graylog.org/t/email-template-backlog/14634/2 "2020-03-25T10:30:10Z")

</div>

he @IIdikII

as you can specify “lines” you use fields - means you first work on your log to split the informations you need/want into separate fields and if that is given you can refer them in the email that is send out.

---

<div class="post-metadata">

**Author:** ![IIdikII](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/iidikii/32/6067_2.png) [@IIdikII](https://community.graylog.org/u/IIdikII)\
**Post date:** [March 25, 2020, 11:26am UTC](https://community.graylog.org/t/email-template-backlog/14634/3 "2020-03-25T11:26:58Z")

</div>

Thank you jan!  
Just to better explain my question,i want an email like this:

— [Event Definition] ---------------------------  
Title: Test  
Description:  
Type: aggregation-v1  
— [Event] --------------------------------------  
event

— [Backlog] ------------------------------------  
Last messages accounting for this alert:

event before trigger  
event before trigger  
**event triggered**  
event after trigger  
event after trigger

Is it possible?

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [March 25, 2020, 12:18pm UTC](https://community.graylog.org/t/email-template-backlog/14634/4 "2020-03-25T12:18:10Z")

</div>

that is what you configure with “backlog” of messages.

---

<div class="post-metadata">

**Author:** ![IIdikII](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/iidikii/32/6067_2.png) [@IIdikII](https://community.graylog.org/u/IIdikII)\
**Post date:** [March 25, 2020, 2:36pm UTC](https://community.graylog.org/t/email-template-backlog/14634/5 "2020-03-25T14:36:52Z")

</div>

I’ve already tried but backlog contains only messages that matches the definition,  
is there a way to display all messages?  
Thank you for your support!

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [March 25, 2020, 2:39pm UTC](https://community.graylog.org/t/email-template-backlog/14634/6 "2020-03-25T14:39:00Z")

</div>

ah you mean like “those messages came in x seconds before and after this” ?

Sorry such is not possible and it is very unlikely that this is implemented.

---

<div class="post-metadata">

**Author:** ![IIdikII](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/iidikii/32/6067_2.png) [@IIdikII](https://community.graylog.org/u/IIdikII)\
**Post date:** [March 25, 2020, 2:43pm UTC](https://community.graylog.org/t/email-template-backlog/14634/7 "2020-03-25T14:43:26Z")

</div>

Thank you again jan, i think that the best solution is to check directly on graylog search interface  
after receiving the mail.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [April 8, 2020, 2:43pm UTC](https://community.graylog.org/t/email-template-backlog/14634/8 "2020-04-08T14:43:28Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
