Message ID in Alerts

[wadimsewo]

Hello,

can someone tell me how to read graylog message ID in alerts template? We use Graylog 4 and unfortunately we could not find any info in the documentation.

A link to the message would be even better, of course. According to the documentation it should be ${event.id}. But with this no messages can be found.

Best regards,
Wadim

[gsmith]

@wadimsewo
Hello and welcome

Maybe I can help.

${event.id} is the message ID of the stored event/s. This is the ID in Alerts & Events.

${message.id} is the The message ID. This would be the one you use to find the message.

Example:
Notification Template with Event ID and Message ID.
.

Notifcation Email received.

I hope helps.

[wadimsewo]

Hi @gsmith,
thanks for your reply.

I already read about ${message.id} but unfortunately it does not work. The value is completely empty.
This is my template:

And I receive this email:

[shoothub]

You can’t access ${message.id} directly, you need to use inside loop foreach:

${foreach backlog message}
ID: ${message.id}
${end}

[wadimsewo]

Hi @shoothub,

I tried it out, but still no message ID

My template:

E-Mail:

[shoothub]

Check if you have enabled Message backlog and setup to 1