Graylog 3.1 using extractor in email subject

I want something very simple but for some reason i can’t get it working

my extractor works and is shown in the email where
{foreach event.fields field} {field.key}: ${field.value} is used

my extractor name is check_user

How to use it in the email subject?
${event.fields.check_user} ??

It seems the docs are under development but im getting crazy not managing something that simple…

Thanks!

Ok a part of my mistake was event.fields

Correct value is ${message.fields.check_user}.
Then my value shows up in the email body but NOT in the subject…
Is this even possible?

no - that is not possible in the subject.

Ok thanks for confirming! will add it as feature request.

It would be great to have this feature, I also miss it.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.