Alert message templates

You can change the text of your alerts. Use tags to add the details of the event.

Where to change the text #

Where	What it changes
In a channel, under Custom Message Template (optional)	All alerts sent through this channel.
In a rule, with Override the default message template for this rule	Only alerts from this rule. This wins over the channel text.

Leave the fields empty to use the default text.

Email channels have a Subject and a Body. Slack channels have one Message. Webhook channels send data, not text, so they have no template.

The default email #

• Subject: Pastmark Alert: {{rule_name}}
• Body: {{message}} and {{count_line}}

Tags you can use #

Tag	What it shows
{{rule_name}}	The name of the alert rule.
{{message}}	The message of the event.
{{severity}}	The severity: info, warning, error, critical or debug.
{{event_type}}	The group of the event, for example user or authentication.
{{action}}	The action, for example failed_login.
{{condition_type}}	The kind of rule.
{{timestamp}}	When the event happened.
{{count}}	How many times the event happened.
{{threshold}}	The number of events the rule waits for.
{{count_line}}	A sentence like “Occurred 6 times (threshold: 6).”
{{log_url}}	A link to the event in your log.
{{log_id}}	The event ID.
{{site_name}}	Your site title.
{{site_url}}	Your site address.
{{admin_email}}	Your site’s admin email.

The list of tags is also under Available Tags in the form.

Example #

Subject: [{{site_name}}] {{rule_name}}

{{message}}
Severity: {{severity}}
See the event: {{log_url}}

Click Preview to see the text with example data before you save.