Hi There,
I have created one email notification on specific message in my stream
but email I received dont hold required data.
I follow below link form Gray log documentation
http://docs.graylog.org/en/3.1/pages/streams/alerts.html
" Email alert notification" is what I used.
But in Email that I received I dont find stream Id/title/URL
Below is email template I created and attached to Alert.
"
— [Event Definition] ---------------------------
Title: ${event_definition_title}
Description: ${event_definition_description}
Type: ${event_definition_type}
stream_url: {stream_url} stream:{stream} – Empty data
stream Id : ${stream.id} – Empty data
stream Title: ${stream.title} – Empty data
stream Description: ${stream.description} – Empty data
—check Result----
check_result :${check_result} – Empty data
check_result Trigger Condition: ${check_result.triggeredCondition} – Empty data
–backlog —
backlog: ${backlog.length} – Empty data : 0
Test Streams: ${streams} – Empty data
Streams Length : ${streams.length} – Empty data
–
— [Event] --------------------------------------
Timestamp: {event.timestamp}
Message: {event.message}
Source: {event.source}
Key: {event.key}
Priority: {event.priority}
Alert: {event.alert}
Timestamp Processing: {event.timestamp}
Timerange Start: {event.timerange_start}
Timerange End: {event.timerange_end}
Fields:
{foreach event.fields field} {field.key}: {field.value}
{end}
{if backlog}
— [Backlog] ------------------------------------
Last messages accounting for this alert:
{foreach backlog message}
{message}
{end}
{end}
"
Below is filter and Aggregation:
SearchQuery : message:“This is test message”
Streams: “MyStreamName”
Search Winthin the last : 10 Minutes (able to view result in Filter Preview)
Execute search eevery : 1 minutes
Filter has results: checked