elastalert
elastalert copied to clipboard
Email alert <MISSING VALUE>
Hi,
when testing my rule with email alert using the script 'elastalert-test-rule' all fields return correctly. The email body and subject are as expected.
However, when the alert does run and sends the email. the fields lose their values and instead I get ' < MISSING VALUE > '.
Changing the same rule to Slack works correctly too, so I'm assuming there's a bug on the email alert specifically.
Also of note, the default fields do work, just not the logstash ones.
Example works: _id, _index Example fails: message, service_name
Using: docker pull bitsensor/elastalert:3.0.0-beta.1 Elastsearch: 7.0.0
Thank you.