I have just rebuilt our graylog server from v4 to v5.2.2. We have an input of RAW UDP and our switches send their syslog messages to graylog. The messages are showing up fine in search with all the fields populated.
Now I am setting up the notifications but the old template I used on v4 is not working. The template is simple:
${foreach backlog message}
${message.message}
${end}
When I go to send a test email, it comes back saying:
Notification has email recipients and is triggered, but sending emails failed. Invalid message supplied
I have tried replacing the variable with event.message but that just shows up as empty in the email.
Where am I going wrong?