Hi Ciaran, On Thursday, 19 January 2017 17:26:23 UTC+1, Ciaran Boyle wrote: > > So this is obviously wrong - Server: ${message.fields.source}, I get > that. Can you pose an example of how I would enter the "message.source" >
As I described before, there is no single message object when the template is being applied, but only a list of messages in the backlog variable. So you have to iterate over the backlog list to get details for each message included in that alert, for example: ########## Alert Description: ${check_result.resultDescription} Date: ${check_result.triggeredAt} Stream ID: ${stream.id} Stream title: ${stream.title} Stream description: ${stream.description} ${if stream_url}Stream URL: ${stream_url}${end} Triggered condition: ${check_result.triggeredCondition} ########## ${if backlog} Servers: ${foreach backlog message} * ${message.fields.source} ${end} Last messages accounting for this alert: ${foreach backlog message}${message} ${end}${else}<No backlog> ${end} You can find a description of the template engine at https://htmlpreview.github.io/?https://raw.githubusercontent.com/DJCordhose/jmte/master/doc/index.html Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/93844918-282a-407b-888b-72947d9f4291%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.