[graylog2] Re: Email notifications using extractors
Documentation is not specifying the way you access specific fields.
Assuming Ip and Command are specific fields you extracted,
Just try:
${foreach backlog message}${message.fields.Ip} ${message.fields.Command} - my
version ${end}
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/12ff-2001-43a9-ad50-027fbd908a18%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: Email notifications using extractors
Hi Stan
This should work:
${foreach backlog message}${message.fields.Ip} ${message.fields.Command} - my
version ${end}
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/d63c29b4-7f19-417f-aeea-69badeb94e64%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: Email notifications using extractors
Hello, Jochen!
Thank you for answer. But I still havea problem.
I've created 2 extractors. From full message I extracted IP and Command
fields. In Dashboards I see these fields. I tried to rewrite callback.
${foreach backlog message}${message} - was by default
${foreach backlog message}${Ip} ${Command} - my version
I think it doesnt work because of my wrong syntax
вторник, 19 января 2016 г., 16:12:44 UTC+3 пользователь Jochen Schalanda
написал:
>
> Hi Stanislav,
>
> you can edit the email template for the Email Alert Callback in the
> Graylog web interface at Streams -> Manage alerts -> Edit callback. Within
> this template, you can access any message field.
>
>
> Cheers,
> Jochen
>
> On Tuesday, 19 January 2016 13:19:52 UTC+1, Stanislav An wrote:
>>
>> Hi all!
>>
>> Have a question. Is it possible to get email notifications not with full
>> log message from host, but with only specific fields, which i determined in
>> extractors?
>>
>> Or maybe you have some email designer?
>>
>> best regards,
>> Stanislav
>>
>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/d89f975c-8911-469a-a8d2-9ab32d35c006%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: Email notifications using extractors
Hi Stanislav,
please
see http://docs.graylog.org/en/1.3/pages/streams.html#email-alert-callback
for a description of how to use the email template and which variables are
available.
Cheers,
Jochen
On Friday, 22 January 2016 09:42:56 UTC+1, Stanislav An wrote:
>
> Hello, Jochen!
>
> Thank you for answer. But I still havea problem.
>
> I've created 2 extractors. From full message I extracted IP and Command
> fields. In Dashboards I see these fields. I tried to rewrite callback.
> ${foreach backlog message}${message} - was by default
>
> ${foreach backlog message}${Ip} ${Command} - my version
>
> I think it doesnt work because of my wrong syntax
>
> вторник, 19 января 2016 г., 16:12:44 UTC+3 пользователь Jochen Schalanda
> написал:
>>
>> Hi Stanislav,
>>
>> you can edit the email template for the Email Alert Callback in the
>> Graylog web interface at Streams -> Manage alerts -> Edit callback. Within
>> this template, you can access any message field.
>>
>>
>> Cheers,
>> Jochen
>>
>> On Tuesday, 19 January 2016 13:19:52 UTC+1, Stanislav An wrote:
>>>
>>> Hi all!
>>>
>>> Have a question. Is it possible to get email notifications not with full
>>> log message from host, but with only specific fields, which i determined in
>>> extractors?
>>>
>>> Or maybe you have some email designer?
>>>
>>> best regards,
>>> Stanislav
>>>
>>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/0029845d-dcff-4cf0-a9be-f9f93507906a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: Email notifications using extractors
Hi Stanislav, you can edit the email template for the Email Alert Callback in the Graylog web interface at Streams -> Manage alerts -> Edit callback. Within this template, you can access any message field. Cheers, Jochen On Tuesday, 19 January 2016 13:19:52 UTC+1, Stanislav An wrote: > > Hi all! > > Have a question. Is it possible to get email notifications not with full > log message from host, but with only specific fields, which i determined in > extractors? > > Or maybe you have some email designer? > > best regards, > Stanislav > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/28f15d0d-6218-4392-8a8f-34fb9e067b14%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
