# Stream and alert (condition) question **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [May 1, 2019, 6:21pm UTC](https://community.graylog.org/t/stream-and-alert-condition-question/10211 "2019-05-01T18:21:22Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![santi](https://avatars.discourse-cdn.com/v4/letter/s/439d5e/32.png) [@santi](https://community.graylog.org/u/santi)\ **Post date:** [May 1, 2019, 6:21pm UTC](https://community.graylog.org/t/stream-and-alert-condition-question/10211/1 "2019-05-01T18:21:23Z")
Hi, I’m testing graylog. Actually I set a new stream with a two alerts, but with conditions. The first condition is with plugin “correlation” and the second condition is with “Count messages”. I’ve checked that is running with the first match condition (it doesn’t work always) only, the second condition it never works. I’m having several issues with that. Do you know if you has this situation? I mean that a stream can work with a one conditions only, I think that in base for my situation. Thanks ---
**Author:** ![frantz](https://avatars.discourse-cdn.com/v4/letter/f/dbc845/32.png) [@frantz](https://community.graylog.org/u/frantz)\ **Post date:** [May 3, 2019, 11:28am UTC](https://community.graylog.org/t/stream-and-alert-condition-question/10211/2 "2019-05-03T11:28:48Z")
I think multiple alert conditions can be linked to the same stream. Can you provide screenshots of your stream rules, alert conditions and some log samples ? ---
**Author:** ![santi](https://avatars.discourse-cdn.com/v4/letter/s/439d5e/32.png) [@santi](https://community.graylog.org/u/santi)\ **Post date:** [May 4, 2019, 5:24pm UTC](https://community.graylog.org/t/stream-and-alert-condition-question/10211/3 "2019-05-04T17:24:43Z")
So some times for example the threshold doesn’t works fine. If the threshold is set for 3 (more than) , I don’t see the notificate like a bit to 6 o 7 times …if I set the threshold to 3 , the notification must alert on 4, must be that, no?.I think that can be or I feel that which the threshold is not working fine. ---
**Author:** ![frantz](https://avatars.discourse-cdn.com/v4/letter/f/dbc845/32.png) [@frantz](https://community.graylog.org/u/frantz)\ **Post date:** [May 6, 2019, 9:07am UTC](https://community.graylog.org/t/stream-and-alert-condition-question/10211/4 "2019-05-06T09:07:15Z")
I have no issue with threshold. If it is set to “more than 3”, I get notified if the stream contains 4 logs. ---
**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\ **Post date:** [May 6, 2019, 9:11pm UTC](https://community.graylog.org/t/stream-and-alert-condition-question/10211/5 "2019-05-06T21:11:48Z")
did you have “repeated notifications” active? if you have a hit with 6 messages and one minute later you have 7 messages you will not get a new notification because it has not resolved once. Only the check in the box for repeated notifications will make you receive a message as long as the condition is true. ---
**Author:** ![santi](https://avatars.discourse-cdn.com/v4/letter/s/439d5e/32.png) [@santi](https://community.graylog.org/u/santi)\ **Post date:** [May 7, 2019, 6:53pm UTC](https://community.graylog.org/t/stream-and-alert-condition-question/10211/6 "2019-05-07T18:53:58Z")
Yes Jan, that so!. I don’t think that the repetition the notification is correct it because its creates very noise, no? Regards ---
**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\ **Post date:** [May 8, 2019, 6:05am UTC](https://community.graylog.org/t/stream-and-alert-condition-question/10211/7 "2019-05-08T06:05:16Z")
repeated notifications will notify every time the condition is true - if that is not choosen notification is only done once and than again when the condition is resolved and than is true again. ---
**Author:** ![santi](https://avatars.discourse-cdn.com/v4/letter/s/439d5e/32.png) [@santi](https://community.graylog.org/u/santi)\ **Post date:** [May 14, 2019, 5:22pm UTC](https://community.graylog.org/t/stream-and-alert-condition-question/10211/8 "2019-05-14T17:22:03Z")
mmmmm, do you know if the notification can change something into the text or in the body the alert??? I say that because will be good dot of start for identifier different type of alerts, no? Thanks ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [May 28, 2019, 5:22pm UTC](https://community.graylog.org/t/stream-and-alert-condition-question/10211/9 "2019-05-28T17:22:08Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.