Re: [graylog2] More Email Alerts as desired

2016-05-23 Thread Dennis Oelkers
Hi Daniel, it might be a bit counterintuitive, but it seems like the code is doing exactly what it’s supposed to do. The point that is probably confusing you, is that you implicitly assume, that messages which had triggered an alert already, are not taked into account anymore for future alert

Re: [graylog2] More Email Alerts as desired

2016-05-23 Thread 'Daniel4711' via Graylog Users
Hi Dennis, how did you configure your alert condition? > > Trigger altert when there are more than 2 messages in the last 5minutes. wait 0 minutes... When sending an altert, include the last 2 messages of the stream evaluated for this altert condition. This is where im am getting the 15