Hi, If the grace period is set to 0, should a Field Content Alert Condition trigger for every message that passes through it?
I am working on an error tracking system, where each stream represents a separate reason for a developer to be notified, whether this is per page, application, etc. In order to create this, I need a way to trigger an action to occur on each message, and I need to know what stream it is coming from. There will be a periodic task that sends out notifications at regular intervals after the first notification occurs, in addition to a couple other conditions. Since this system will be notifying on errors in a production environment, the initial notification needs to be sent when the first instance of an error in some time occurs. In addition, since any error could pass through multiple streams, I also need to track which stream it is passing through. My go to in this case, then, is Alert Conditions and AlarmCallbacks. Specifically, I am using a Field content value alert condition. What I am seeing, however, is that when grace period is set to 0(minutes), I only get a notification once a minute. I would expect that from a grace period of 1(minute), but I am not sure if I'm misunderstanding what the grace period means. Is this intended functionality? My life would be made much easier if I could have the alarm trigger on every message. Using graylog 2.1.2, package install. Thank you, Jordan McMichael -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/69ed7a7c-9cd0-4dd4-9ff6-54cfb9cc10c6%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
