Hello, I’ve GrayLog 2.4 working as expected but I need to customize the E-Mail subject in order to get the below desired setup, I want to Include only the Source, Conditions’ Tile & Device Host-name highlighted below. Ex. 10.15.2.22 | RMS-SW-S9306-03 | LoopDetected Below is a SNAP from the email…

Correct one will be (sorry for previous post, editor broke some characters): ${foreach backlog message}${message.fields.hostname}${end}

Graylog 2.4 is way back there… making public support for your question more difficult…

Hello tmacgbay, First of all, thanks for your response, actually I think this is a general request and I don’t mind if you share your inputs on a newer version and I’ll try to map it to my version. I mean it’s just a Subject customization issue.

good point - here is a previous post i did a search for (…) that has the detail you need… read beyond my post as I was slightly wrong in it… [image] Add the event source to the subject of an email notification Graylog Central (peer support) I do not believe it’s possibl…

Check my previous post, as @tmacgbay suggested: [image] Add the event source to the subject of an email notification Graylog Central (peer support) It works. If you want source field in subject, you need to use {$message.source}: ${foreach backlog message}${message.source…

Hello shoothub, I’m really grateful for your reply, I could now see the source & the condition title in the subject of the email. Using the below code: Graylog Alert || Device IP: ${foreach backlog message}${message.source}${end} || ${alertCondition.title} Can you share with me if it is possib…

It’s possible if you have extracted Hostname in separate field. After that you can use: ${foreach backlog message}${message.fields.hostname}${end} Replace hostname with field which contains your Hostname.

How to extract it in a separate field ?

Use extractor or pipeline rule. https://docs.graylog.org/en/3.3/pages/extractors.html https://docs.graylog.org/en/3.3/pages/pipelines.html

Hello shoothub, Thanks for your feedback, actually I’m new to the Graylog. I went through the above docs but unfortunately didn’t get the best way to extract the hostname. Here is a sample from the messages I receive on the graylog. All are the same structure. DATE TIME HOSTNAME THE MESSAGE [i…

Try to use this GROK extractor (grok pattern) for message field: %{MONTH} +%{MONTHDAY} %{YEAR} %{TIME} %{HOSTNAME:hostname} And check Named captures only This way you extract only hostname to field hostname.

How to customize Graylog message notification subject

Graylog Central (peer support)

tmacgbay (Tmacgbay) June 30, 2020, 8:13pm 4

good point - here is a previous post i did a search for (…) that has the detail you need… read beyond my post as I was slightly wrong in it…

Topic		Replies	Views
Add the event source to the subject of an email notification Graylog Central (peer support)	7	4602	December 4, 2019
Add the value of a backlog message field to Graylog email alert notification subject Graylog Central (peer support)	3	1332	July 30, 2021
Alert Notification Email Subject Modification Graylog Central (peer support)	2	994	May 13, 2019
Email Variabls to display HOSTNAME, IP, PROCESS, etc Graylog Central (peer support)	8	2256	June 18, 2019
Graylog 3.1 using extractor in email subject Graylog Central (peer support)	4	471	October 18, 2019

How to customize Graylog message notification subject

Related topics