There is an issue with HTTP alarm callback notification on the latest graylog 1.0.2. Some messages mentioned in the backlog don't belong the source stream, and their count doesn't reflect alert condition settings: there are always 10 messages in the backlog, no matter how many previously set in the condition.
Recently discussed it with @dennisoelkers , also provided the steps how to reproduce it.
There is an issue with HTTP alarm callback notification on the latest graylog 1.0.2. Some messages mentioned in the backlog don't belong the source stream, and their count doesn't reflect alert condition settings: there are always 10 messages in the backlog, no matter how many previously set in the condition.
Recently discussed it with @dennisoelkers , also provided the steps how to reproduce it.