Notification fields are not getting filled

Graylog Central (peer support)
1

1. Describe your incident:

GraylogCommunity
GraylogCommunity1839×497 21 KB

GraylogCommunity2
GraylogCommunity21090×206 4.7 KB

Hello Guys,

maybe some of you have already figured out how to fix this problem because I dont know what to do anymore. In the Alert & Event Definition, I have already picked the fields and configured everything. When i choose “Filter has Results”, the chosen fields which are attached in the screenshot get filled by Graylog. However, when i choose “Aggregation of results reaches a threshold”, the chosen fields do not get filled. Why does this happen ? I would appreciate it if someone has a solution to this problem because I’ve been stuck on it for a long time now.

2. Describe your environment:

  • OS Information:
    Windows
  • Package Version:
    Graylog 6.0.2
  • Service logs, configurations, and environment variables:
2

The field naming is a bit different for aggregations, since there is more than 1 message involved. I don’t have it off the top of my head … this has come up previously on the forums so you should be able to find it.