# Including message contect into alert notification email

**URL:** <https://community.graylog.org/t/including-message-contect-into-alert-notification-email/1680>\
**Category:** Graylog Central (peer support)\
**Created:** [July 8, 2017, 9:14pm UTC](https://community.graylog.org/t/including-message-contect-into-alert-notification-email/1680 "2017-07-08T21:14:28Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![bayramkaragoz](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/bayramkaragoz/32/558_2.png) [@bayramkaragoz](https://community.graylog.org/u/bayramkaragoz)\
**Post date:** [July 8, 2017, 9:14pm UTC](https://community.graylog.org/t/including-message-contect-into-alert-notification-email/1680/1 "2017-07-08T21:14:28Z")

</div>

Hello,

I’m using graylog 2.2.3 and collecting syslog messages into graylog.  
Also I want to send message content and source with alert notification email body.  
The followings are my alert email template and dropped email.  
The question is why i can not see any message related field in dropped email?

**EMAIL TEMPLATE**

```nohighlight
##########
Alert Description: ${check_result.resultDescription}
Date: ${check_result.triggeredAt}
Stream ID: ${stream.id}
Stream title: ${stream.title}
Stream description: ${stream.description}
Alert Condition Title: ${alertCondition.title}
${if stream_url}Stream URL: ${stream_url}${end}

Triggered condition: ${check_result.triggeredCondition}
##########

${if backlog}Last messages accounting for this alert:
${foreach backlog message}
Message: ${message.message}
Source: ${message.source}
Full Message: ${message.fields.full_message}
${end}${else}<No backlog>
${end}

```

**DROPPED EMAIL**

```nohighlight
##########
Alert Description: Stream received messages matching <message:"down"> (Current grace time: 0 minutes)
Date: 2017-07-08T21:11:22.582Z
Stream ID: 595f8ec7651b3f3156838478
Stream title: DOWN-UP Stream
Stream description: Down-Up Streams
Alert Condition Title: Down Alert
Stream URL: Please configure 'transport_email_web_interface_url' in your Graylog configuration file.

Triggered condition: 0433d41b-b068-4d8c-b44b-96638b42067f:field_content_value={field: message, value: down, grace: 0, repeat notifications: false}, stream:={595f8ec7651b3f3156838478: "DOWN-UP Stream"}
##########

<No backlog>

```

Thanks for your help

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [July 10, 2017, 7:30am UTC](https://community.graylog.org/t/including-message-contect-into-alert-notification-email/1680/2 "2017-07-10T07:30:00Z")

</div>

What’s the exact alert condition you’re using?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [July 24, 2017, 7:30am UTC](https://community.graylog.org/t/including-message-contect-into-alert-notification-email/1680/3 "2017-07-24T07:30:07Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.