title: Logstash email alerts
body: <p>I configured logstash to send email alerts in case there are some combinations of words in the log message. I get the alerts but instead of receiving the message field value in the alert, I get word "@message".
  How can I solve this problem?</p>
  
  <p>Here is my logstash config file:</p>
  
  <pre><code>root@srv-syslog:~# cat /etc/logstash/conf.d/central.conf
  input {
      syslog {
          type =&gt; "syslog"
          port =&gt; 5144
      }
      tcp {
          type =&gt; "cisco_asa"
          port =&gt; 5145
      }
      tcp {
          type =&gt; "cisco_ios"
          port =&gt; 5146
      }
  }
  output {
      elasticsearch {
          bind_host =&gt; "127.0.0.1"
          port =&gt; "9200"
          protocol =&gt; http
      }
      if "executed the" in [message]  {
          email {
              from =&gt; "logstash_alert@company.local"
              subject =&gt; "logstash alert"
              to =&gt; "myemail@company.local"
              via =&gt; "smtp"
              body =&gt; "Here is the event line that occured: %{@message}"
          }
      }
  }
  </code></pre>