From 3c16ecdf83a2d50bae255ba36e7127fe43bb8f0b Mon Sep 17 00:00:00 2001 From: Florian GAULTIER Date: Tue, 28 May 2019 21:39:06 +0200 Subject: [PATCH] Add related_events to artifcats --- elastalert/alerts.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/elastalert/alerts.py b/elastalert/alerts.py index ebaf0b51e..83c52bd90 100644 --- a/elastalert/alerts.py +++ b/elastalert/alerts.py @@ -2178,6 +2178,9 @@ def alert(self, matches): artifacts = [] for match in matches: artifacts += self.create_artifacts(match) + if 'related_events' in match: + for related_event in match['related_events']: + artifacts += self.create_artifacts(related_event) alert_config['artifacts'] = artifacts alert_config['title'] = self.create_title(matches)