1. Describe your incident: Notifications does not seem to be able to parse anything ${message.*}-related except for ${message.message}, so other variables such as ${message.cluster_name} or ${message.namespace_name} are completely ignored, thus making our received emails with aggregated messages a …

I found it wonky to work with too, try ${message.fields.<fieldname>} I wonder if anyone has done a writeup or video on the how and why building alert message code ids more difficult than it needs to be … or at least seems that way. :smiley:

[SOLVED] message.cluster_name is ignored for notifications

Graylog Central (peer support)

gsmith (GSmith) November 19, 2022, 5:59am 5

hey @m_mlk

Sorry about that post you copied from, it was incorrect.

Also have you seen these?

Adding Stream URL to Notification Template
ALERT template - HTML

Topic		Replies	Views
${message.message} not working in the alert template Graylog Central (peer support)	17	6272	October 2, 2018
Notifications don't contain data Graylog Central (peer support) alert	4	243	November 29, 2023
Events using aggregation group by field removes data from notification Graylog Central (peer support)	12	462	April 10, 2024
Problem with create alerts Graylog Central (peer support)	10	5896	October 1, 2017
"count()" var in Graylog Alert Notifications Graylog Central (peer support)	1	507	February 5, 2021

[SOLVED] message.cluster_name is ignored for notifications

Related topics