Graylog2-server: Expose search URL to event notifications
Description
The old alerting system exposed a search URL to alarm callbacks that could be used by notification receivers to find messages that triggered the notification. This is currently missing in the new event notification system.
Since the new alerting is not stream specific anymore, we have to create a link to the new search page to allow multi-stream searches. We might have to create a specific search endpoint for this to be able to create a simple link. (the new search is mainly using POST request for searches)
bernd
All 3 comments
Until you fix it, adjust the 3.1 documentation.
http://docs.graylog.org/en/3.1/pages/streams/alerts.html#email-alert-notification
karlisi
on 5 Sep 2019
While we are waiting for 3.2.0, as a workaround, you can use https://graylog_url/streams/${stream.id}/search in templates.
juris
on 4 Oct 2019
So instead of having a solution, you just keep pushing out the milestone?? Come on, this is poor form. The 3.2 doco STILL has stream_url as a valid option in notifications and it STILL does not work. I need an easy way for only semi-technical people to be linked to an event (or filtered list of events) that generated the alert so that the can determine if action needs to be taken. To break such a useful and important feature is crazy. Perhaps we can have a 'Simple' alert option that will fire off a single event?
ahuxtable
on 4 Feb 2020
Related issues
1tft
路
3Comments
eroji
路
4Comments
mhaasEFD
路
4Comments
edmundoa
路
3Comments
avongluck-r1soft
路
4Comments
Most helpful comment
So instead of having a solution, you just keep pushing out the milestone?? Come on, this is poor form. The 3.2 doco STILL has stream_url as a valid option in notifications and it STILL does not work. I need an easy way for only semi-technical people to be linked to an event (or filtered list of events) that generated the alert so that the can determine if action needs to be taken. To break such a useful and important feature is crazy. Perhaps we can have a 'Simple' alert option that will fire off a single event?