logging_alert.alert_url and logging_alert.messages_url are broken in 2.x

airbus-cyber / graylog-plugin-logging-alert

Alert notification plugin for Graylog to generate log messages from alerts

Other

24 stars 3 forks source link

logging_alert.alert_url and logging_alert.messages_url are broken in 2.x #10

Closed frantz45 closed 4 years ago

frantz45 commented 4 years ago

The query in logging_alert.messages_url doesn't work. It seems it misses the part "&q=stream%3Axxxxxxxxxx": /search?rangetype=absolute&from=aaa&to=bbb+AND+user%3Atoto

logging_alert.alert_url is always empty. I know the page /alerts/alert_id doesn't exist anymore. It may be possible to redirect to the page /alerts/ and to POST the right search. If it's not possible you can remove this parameter from the code and the documentation.

tomasnk commented 4 years ago

The logging_alert.messages_url with missing stream part, is resolved with the aggregation and correlation plugin version 2.1.1 logging_alert.alert_url is removed in version 2.1.2 of logging alert plugin