Notification fields are not getting filled

1. Describe your incident:

Hello Guys,

maybe some of you have already figured out how to fix this problem because I dont know what to do anymore. In the Alert & Event Definition, I have already picked the fields and configured everything. When i choose “Filter has Results”, the chosen fields which are attached in the screenshot get filled by Graylog. However, when i choose “Aggregation of results reaches a threshold”, the chosen fields do not get filled. Why does this happen ? I would appreciate it if someone has a solution to this problem because I’ve been stuck on it for a long time now.

2. Describe your environment:

  • OS Information:
    Windows
  • Package Version:
    Graylog 6.0.2
  • Service logs, configurations, and environment variables:

The field naming is a bit different for aggregations, since there is more than 1 message involved. I don’t have it off the top of my head … this has come up previously on the forums so you should be able to find it.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.