Hello,
I have a little question,
I have graylog in my enterprise with an AD who members use login "1st
letter of first name and full last name" and email "first name + full
name@FQDN".
For each user i made an alert who send him a mail when he
connect/disconnect.
Date: ${check_result.triggeredAt}
Description : ${stream.description}
Message : ${foreach backlog message}
${if message.fields.ASA_SYSLOG="%ASA-4-113019"}"1st letter of first name
and full last name", vous vous
êtes déconnecté(e).${else}"1st letter of first name and full last name",
vous vous êtes connecté(e).${end}
${end}
${foreach backlog message}${if
message.message}${message.message}${end}${end}
ID du Stream : ${stream.id}
Description de l'alerte : ${check_result.resultDescription}
Basicaly I match the message with a regex (which match "1st letter of first
name and full last name"), and i extract ASA_SYSLOG for the code return,
and i send connect or disconnect.
I want to make a big "code" email with all my users and send email to the
user.
But is it possible to do a ${if message.fields.USER ="MyNameIs"} send email
to MyNameIs@FQDN {end} ?
Thanks you
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/b99089e6-7299-462a-bec5-30b71d44df86%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
