# Notification multiple questions

**URL:** https://community.graylog.org/t/notification-multiple-questions/4753
**Category:** Graylog Central (peer support)
**Tags:** winlogbeat, sidecar
**Created:** [March 28, 2018, 7:39am UTC](https://community.graylog.org/t/notification-multiple-questions/4753 "2018-03-28T07:39:25Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![totu](https://avatars.discourse-cdn.com/v4/letter/t/e274bd/32.png) [@totu](https://community.graylog.org/u/totu)
#### Post date: [March 28, 2018, 7:39am UTC](https://community.graylog.org/t/notification-multiple-questions/4753/1 "2018-03-28T07:39:25Z")

</div>

Hello everybody! Firstly i’d thank developers for such flexible product. Thanks a lot!

There is the case:  
I m sending winlogbeats logs from Windows and want to be alerted at some events. There is my “Alert message”:

```
Alert Description: ${check_result.resultDescription}
Date: ${check_result.triggeredAt}

Stream title: ${stream.title}
Stream description: ${stream.description}
Alert Condition Title: ${alertCondition.title}

${if backlog}Last messages accounting for this alert:
${foreach backlog message}
${message}
${message.message}
${message.fields.fulL_message}

${end}${else}<No backlog>
${end}

```

There is the alert when recieved:

```
Alert Description: Dummy alert to test notifications
Date: 2018-03-28T07:22:48.879Z

Stream title: All messages
Stream description: Stream containing all messages
Alert Condition Title: 

<No backlog>

```

Problems:

1. Time is not proper. Actually it should be “Date: 2018-03-28T **10** :22:48.879Z”

2. Alert Condition Title is blank, both in English and Russian language.

3. I want to get full message field, but i am always getting `<No backlog>` output. (Do not look at Dummy alert, there is no difference which condition is trigered)

How could i configure this?

Sorry for silly questions if they are.  
Thanks in advance!

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)
#### Post date: [April 11, 2018, 7:49am UTC](https://community.graylog.org/t/notification-multiple-questions/4753/2 "2018-04-11T07:49:38Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
