Hey all, I have a stream that's set to send an email whenever an alert is triggered that matches a channel. The email is received and all is well but graylog seems to group a series of events together before sending the email. Is there any way to change this? Basically I want an email whenever an event matching the criteria hits that stream. One email per event. Does anyone know if that's possible? My alert condition is as follows:
Trigger alert when a message arrives that has the field set to and then wait at least minutes until triggering a new alert. (grace period) When sending an alert, include the last messages of the stream evaluated for this alert condition. I would have thought that a 0 minute grace period would do this but I tested it and graylog lumped 4 backlog messages into the email where I wanted 4 emails with one event in each. When I set the number of included messages to 1, I only get one email with one alert and it seems to ignore the other events that I triggered despite being logged on the dashboard. Thanks, -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/b08b3efa-886a-4fe9-922f-5938c655265d%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
