Graylog Email Alert

Hi all,

i have our cisco ASA firePOWER module sending syslog to our graylog instance and ive setup email alerts. the alerts are coming through and ive passed some message variables which work but it seems that all my extractors which are based on grok patterns dont allow me to pass these to the email. any thoughts?


This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.