Hi Ciaran, I will simply quote from my reply on GitHub: https://github.com/Graylog2/graylog2-server/issues/3392#issuecomment-273806544
There is no global message object but always a collection of messages which you have to iterate over (like shown on the bottom of the template and described in http://docs.graylog.org/en/2.1/pages/streams/alerts.html#email-alert-callback ). Cheers, Jochen On Thursday, 19 January 2017 17:05:31 UTC+1, Ciaran Boyle wrote: > > I am trying to get the source (server in this case) to show when I receive > an alert, but the alert has an empty field. > > The Call back details are below: > > ########## > Alert Description: ${check_result.resultDescription} > Date: ${check_result.triggeredAt} > Stream ID: ${stream.id} > Server: ${message.fields.source} > Stream title: ${stream.title} > Stream description: ${stream.description} > ${if stream_url}Stream URL: ${stream_url}${end} > > Triggered condition: ${check_result.triggeredCondition} > ########## > > ${if backlog}Last messages accounting for this alert: > ${foreach backlog message}${message} > > ${end}${else}<No backlog> > ${end} > > However the details in the alert when I do get the alert are below, > bearing in mind that this is a test > > ########## > Alert Description: Stream had 260 messages in the last 1 minutes with trigger > condition more than 1 messages. (Current grace time: 0 minutes) > Date: 2017-01-19T15:06:19.640Z > Stream ID: 5880d1f5913f7855c558daf9 > Server: > Stream title: Test > Stream description: Test > Stream URL: > http://graylog/streams/5880d1f5913f7855c558daf9/messages?rangetype=absolute&from=2017-01-19T15:05:19.640Z&to=2017-01-19T15:06:19.640Z&q=* > > Triggered condition: > 6165c412-52e5-47cd-b160-a348f613980c:MESSAGE_COUNT={time: 1, threshold_type: > more, threshold: 1, grace: 0}, stream:={5880d1f5913f7855c558daf9: > "TestBiztalk"} ########## > > <No backlog> > > I would expect to see a server name where "Server: " but it's blank. Am I > using the correct variable? > > - Graylog Version: Graylog 2.0.3 (f07c170 > > <https://github.com/Graylog2/graylog2-server/commit/f07c1703cda32d12108bc9f873f054fd192abc64>) > > on graylog (Oracle Corporation 1.8.0_77 on Linux 4.2.0-38-generic) > - Elasticsearch Version: > - MongoDB Version: > - Operating System: Ubuntu > - Browser version: Chrome > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/6558fc4a-6d00-42ec-8d02-48b79573aa05%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
