# Graylog Alert with multiple messages in one mail

**URL:** https://community.graylog.org/t/graylog-alert-with-multiple-messages-in-one-mail/12664
**Category:** Graylog Central (peer support)
**Created:** [November 7, 2019, 9:11am UTC](https://community.graylog.org/t/graylog-alert-with-multiple-messages-in-one-mail/12664 "2019-11-07T09:11:55Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![benjamin](https://avatars.discourse-cdn.com/v4/letter/b/3d9bf3/32.png) [@benjamin](https://community.graylog.org/u/benjamin)
#### Post date: [November 7, 2019, 9:11am UTC](https://community.graylog.org/t/graylog-alert-with-multiple-messages-in-one-mail/12664/1 "2019-11-07T09:11:55Z")

</div>

Hello

In my current setup i get an email for every event with one single message.  
Would it be possible to get one mail with all messages found matching the filter criteria?

In the filter & aggreagation setup i search for a query within the last 24 hours and execute the seach also every 24 hours.  
The filter preview shows me 4 messages found.  
In the notification tab i have set backlog to 50 messages.  
Shouldnt the backlog feature iterate through all events found and include all messages in the mail?

This is myTemplate:  
— [Event Definition] ---------------------------  
Title: {event\_definition\_title} Description: {event\_definition\_description}  
Type: {event\_definition\_type} --- [Event] -------------------------------------- Timestamp: {event.timestamp}  
Message: {event.message} Source: {event.source}  
Key: {event.key} Priority: {event.priority}  
Alert: {event.alert} Timestamp Processing: {event.timestamp}  
Timerange Start: {event.timerange\_start} Timerange End: {event.timerange\_end}  
Fields:  
{foreach event.fields field} {field.key}: {field.value} {end}  
{if backlog} --- [Backlog] ------------------------------------ Last messages accounting for this alert: {foreach backlog message}  
{message} {end}  
${end}

Running Graylog 3.1.2

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)
#### Post date: [November 21, 2019, 9:11am UTC](https://community.graylog.org/t/graylog-alert-with-multiple-messages-in-one-mail/12664/2 "2019-11-21T09:11:57Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
