Send mail when Log Input stops


I’m new around here. I want to create my alarms in Graylog, but I want it to send me an e-mail when my log inputs stop. How can I do this.

Thank you for your help in advance.

You can define an event that will fire when message count < 1 over a given period of time in a given stream. Then you can create a notification based on that event.

Check out section “aggregation” in the docs:

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.