Viewing alert details (search messages in stream)

Graylog Central (peer support)
1

In previous versions of Graylog (2.4.6), when an alert was received you could click on the alert to view more details like the timeline and what messages were evaluated. Under the Messages Evaluated section there was an option to open the messages in the search page

graylog2-4-6_alerts
graylog2-4-6_alerts1019×268 15.6 KB

I was not able to replicate this in Graylog 3.1.4. Does this feature still exist or is this a configuration issue?

2

if you do not save that information in an additional field this is not possible.

You might want to open a feature request for that: https://github.com/Graylog2/graylog2-server/issues