# Elasticsearch query - subject line for email

**URL:** https://discuss.elastic.co/t/elasticsearch-query-subject-line-for-email/373237
**Category:** Kibana
**Created:** [January 15, 2025, 4:16pm UTC](https://discuss.elastic.co/t/elasticsearch-query-subject-line-for-email/373237 "2025-01-15T16:16:32Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![erikg](https://avatars.discourse-cdn.com/v4/letter/e/91b2a8/32.png) [@erikg](https://discuss.elastic.co/u/erikg)
#### Post date: [January 15, 2025, 4:16pm UTC](https://discuss.elastic.co/t/elasticsearch-query-subject-line-for-email/373237/1 "2025-01-15T16:16:32Z")

</div>

Hello,  
I used to be able to add the grouped by field in the subject line under  
{{context.group}}. Did something change?

Is there another field I can use?

Kibana/ES: 8.16.1

---

<div class="post-metadata">

### Author: ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)
#### Post date: [January 16, 2025, 2:19pm UTC](https://discuss.elastic.co/t/elasticsearch-query-subject-line-for-email/373237/2 "2025-01-16T14:19:30Z")

</div>

Hi @erikg,

Are you referring to the email connector for the Elasticsearch query rule as covered [here](https://www.elastic.co/guide/en/kibana/current/rule-type-es-query.html) in the documentation? It would be good for you to confirm via a screenshot or more detail.

Let us know!

---

<div class="post-metadata">

### Author: ![erikg](https://avatars.discourse-cdn.com/v4/letter/e/91b2a8/32.png) [@erikg](https://discuss.elastic.co/u/erikg)
#### Post date: [January 16, 2025, 2:47pm UTC](https://discuss.elastic.co/t/elasticsearch-query-subject-line-for-email/373237/3 "2025-01-16T14:47:05Z")

</div>

Hello @carly.richmond  
Yes, I am using ES Query rule with email. I found that {{context.group}} didn't work in the subject line.

Here's a picture of the rule:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/2/5232de2a39f7b760e9f3bc0bc72ec6ca7c91a863.png)

After so much trial and error, the one that ended up working for me was {{alert.id}} (this shows the grouped over terms)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/d/bd72cc3bc620e8af7f4c8921b4baefbfddb57b01.png)

---

<div class="post-metadata">

### Author: ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)
#### Post date: [January 16, 2025, 3:27pm UTC](https://discuss.elastic.co/t/elasticsearch-query-subject-line-for-email/373237/4 "2025-01-16T15:27:37Z")

</div>

I'm glad you solved your issue. Thank you for sharing the solution @erikg!
