• Plugin version: v4.1.3
• Released on: 2023-10-03
• Changelog

For other versions, see theVersioned plugin docs.

For questions about the plugin, open a topic in theDiscuss forums. For bugs or feature requests, open an issue inGithub. For the list of Elastic supported plugins, please consult theElastic Support Matrix.

Sends email when an output is received. Alternatively, you may include or exclude the email output execution using conditionals.

output {  if "shouldmail" in [tags] {    email {      to => 'technical@example.com'      from => 'monitor@example.com'      subject => 'Alert - %{title}'      body => "Tags: %{tags}\\n\\Content:\\n%{message}"      template_file => "/tmp/email_template.mustache"      domain => 'mail.example.com'      port => 25    }  }}

This plugin supports the following configuration options plus theCommon options described later.

Also seeCommon options for a list of options supported by all output plugins.

• Value type isstring
• Default value is"localhost"

The address used to connect to the mail server

• Value type isarray
• Default value is[]

Attachments - specify the name(s) and location(s) of the files.

• Value type isstring
• There is no default value for this setting.

Authentication method used when identifying with the server

• Value type isstring
• Default value is""

Body for the email - plain text only.

• Value type isstring
• There is no default value for this setting.

The fully-qualified email address(es) to include as cc: address(es).

This field also accepts a comma-separated string of addresses, for example:"me@example.com, you@example.com"

• Value type isstring
• There is no default value for this setting.

The fully-qualified email address(es) to include as bcc: address(es).

This field accepts several addresses like cc.

• Value type isstring
• Default value is"text/html; charset=UTF-8"

contenttype : for multipart messages, set the content-type and/or charset of the HTML part. NOTE: this may not be functional (KH)

• Value type isboolean
• Default value isfalse

Run the mail relay in debug mode

• Value type isstring
• Default value is"localhost"

The HELO/EHLO domain name used in the greeting message when connecting to a remote SMTP server. Some servers require this name to match the actual hostname of the connecting client.

• Value type isstring
• Default value is"logstash.alert@example.com"

The fully-qualified email address for the From: field in the email.

• Value type isstring
• Default value is""

HTML Body for the email, which may contain HTML markup.

• Value type ispassword
• There is no default value for this setting.

Password to authenticate with the server

• Value type isnumber
• Default value is25

Port used to communicate with the mail server

• Value type isstring
• There is no default value for this setting.

The fully qualified email address for the Reply-To: field.

• Value type isstring
• Default value is""

Subject: for the email.

• This is a required setting.
• Value type isstring
• There is no default value for this setting.

The fully-qualified email address to send the email to.

This field also accepts a comma-separated string of addresses, for example:"me@example.com, you@example.com"

You can also use dynamic fields from the event with the%{{fieldname}} syntax.

• Value type isboolean
• Default value isfalse

Enables TLS when communicating with the server

• Value type isstring
• There is no default value for this setting.

Username to authenticate with the server

• Value type isstring
• Default value is"smtp"

How Logstash should send the email, either via SMTP or by invoking sendmail.

• Value type ispath
• There is no default value for this setting.

Path of aMustache templating file used for email templating. See example in test fixture. Can be used withbody to send multi-part emails. Takes precedence overhtmlBody.

These configuration options are supported by all output plugins:

• Value type iscodec
• Default value is"plain"

The codec used for output data. Output codecs are a convenient method for encoding your data before it leaves the output without needing a separate filter in your Logstash pipeline.

• Value type isboolean
• Default value istrue

Disable or enable metric logging for this specific plugin instance. By default we record all the metrics we can, but you can disable metrics collection for a specific plugin.

• Value type isstring
• There is no default value for this setting.

Add a uniqueID to the plugin configuration. If no ID is specified, Logstash will generate one. It is strongly recommended to set this ID in your configuration. This is particularly useful when you have two or more plugins of the same type. For example, if you have 2 email outputs. Adding a named ID in this case will help in monitoring Logstash when using the monitoring APIs.

output {  email {    id => "my_plugin_id"  }}