Nagios Support Forum

Still testing NLS in trial period, attempting to get real time alerts on domain group changes and most %field.[fieldname]% macros don't seem to work for me. They return (Value Missing).

However the value does appear in the log table with that field.

Using %fields.event.id% simply produces the above message, but that field is used in generating the RTA, and also shows in the event in the log table as populated.

%fields.message% Does work however.

This is the template and it works as expected on a query based alert

Security group: %fields.nlswinlog.event_data.TargetUserName%
Modified by: %fields.nlswinlog.event_data.SubjectUserName%
Occurred at: %fields.event.time.original%
Event ID: <a href="https://www.ultimatewindowssecurity.com ... ent.id%</a>

Event Log Message: %fields.message%

We have an internal issue for that, which should be fixed in the next couple of releases. Keep an eye on the changelog for issue NLS#864.