Graylog2 / Graylog2/graylog2-server
Duplication of notifications
- Dominant language
- Java
- Stars
- 8.1k
- Forks
- 1.1k
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 217
Description
Hi,
After upgrade to 3.1.3 notifications are unusable for a quite common use-case.
Notifications are now triggered if the filter rule is satisfied, regardless of whether a specific event was already in previous notifications or not.
In other words, if I had just 1 event in the stream (say security group change, for example), and my Event definition is configured as:
- Search within the last = 60 minutes
- Execute search every = 1 minute
I will receive 60 emails(!). This is completely impractical. There should be an option to make Graylog just send 1 notification for 1 event in the original stream.
We did not have this issue with previous Graylog versions.
* Graylog Version: 3.1.3
Contributor guide
Assessment
This issue has not been assessed yet.