Graylog2 / Graylog2/graylog2-server

Duplication of notifications

Open
#6,937 2 comments 0 reactions 0 assignees View on GitHub
alerting bug triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

Hi,
After upgrade to 3.1.3 notifications are unusable for a quite common use-case.
Notifications are now triggered if the filter rule is satisfied, regardless of whether a specific event was already in previous notifications or not.

In other words, if I had just 1 event in the stream (say security group change, for example), and my Event definition is configured as:
- Search within the last = 60 minutes
- Execute search every = 1 minute

I will receive 60 emails(!). This is completely impractical. There should be an option to make Graylog just send 1 notification for 1 event in the original stream.

We did not have this issue with previous Graylog versions.

* Graylog Version: 3.1.3

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.