Hi Dennis,
you can only reference fields listed
in
http://docs.graylog.org/en/1.3/pages/streams.html#alert-callbacks-types-explained
in your email template (scroll down a little bit).
In your case, you would access the ad_username field of the message with
${message.fields.ad_username}.
Cheers,
Jochen
On Tuesday, 31 May 2016 17:58:33 UTC+2, Dennis Seaton wrote:
>
> I have an extractor that pulls the username whenever someone is locked out
> of my Windows domain. It puts the username into a field called
> *ad_username*. I now want to use that custom field that I made inside an
> email callback so I can send extremely simplified email alerts like this:
>
> *A user was locked out of the domain at ${check_result.triggeredAt} *
> *The user was: ${ad_username}*
>
> I've seen the Callback documentation here
> <http://docs.graylog.org/en/1.3/pages/streams.html#alert-callbacks-types-explained>
> but
> it is lacking detail on how to do this.
>
> Can anyone tell me if it's possible? How can I use my own fields in the
> callbacks?
>
>
>
> Thanks in advance
>
>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/fe10988f-816c-4491-89b1-88e407b816cc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
