# Email notification for different people?

**URL:** <https://discuss.elastic.co/t/email-notification-for-different-people/32843>\
**Category:** Logstash\
**Created:** [October 23, 2015, 11:08am UTC](https://discuss.elastic.co/t/email-notification-for-different-people/32843 "2015-10-23T11:08:57Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![abcfy2](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abcfy2/32/453_2.png) [@abcfy2](https://discuss.elastic.co/u/abcfy2)\
**Post date:** [October 23, 2015, 11:08am UTC](https://discuss.elastic.co/t/email-notification-for-different-people/32843/1 "2015-10-23T11:08:57Z")

</div>

I want to email different people like this.

```auto
email {
    if [level] = "low" {
        to => "somepeole@domain"
    } else {
        to => "otherpeople@domain"
    }
    from => "foo"
    body => "%{message}"
 ...
}

```

But this config is error because of the syntax error. How to do this ?

---

<div class="post-metadata">

**Author:** ![simmel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/simmel/32/48040_2.png) [@simmel](https://discuss.elastic.co/u/simmel)\
**Post date:** [October 23, 2015, 12:01pm UTC](https://discuss.elastic.co/t/email-notification-for-different-people/32843/2 "2015-10-23T12:01:49Z")

</div>

On Fri, 2015-10-23 at 11:18:57 +0000, Feng Yu wrote:

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [October 23, 2015, 2:13pm UTC](https://discuss.elastic.co/t/email-notification-for-different-people/32843/3 "2015-10-23T14:13:13Z")

</div>

> ```
> if [level] = "low" {
> 
> ```

Change to:

```
if [level] == "low" {

```

---

<div class="post-metadata">

**Author:** ![abcfy2](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abcfy2/32/453_2.png) [@abcfy2](https://discuss.elastic.co/u/abcfy2)\
**Post date:** [October 24, 2015, 2:15am UTC](https://discuss.elastic.co/t/email-notification-for-different-people/32843/4 "2015-10-24T02:15:24Z")

</div>

How about this ?

```auto
email {
    if "low level" in [message] {
        to => "somepeople@domain"
    } else {
        to => "otherpeople@domain"
    }
}

```

Error message:

```auto
Error: Expected one of #, => at line 45, column 16 (byte 951) after output {

        email {
            if

```

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [October 25, 2015, 9:32am UTC](https://discuss.elastic.co/t/email-notification-for-different-people/32843/5 "2015-10-25T09:32:16Z")

</div>

No, you can't have conditionals inside input/output/filter declarations.

---

<div class="post-metadata">

**Author:** ![simmel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/simmel/32/48040_2.png) [@simmel](https://discuss.elastic.co/u/simmel)\
**Post date:** [October 26, 2015, 8:03am UTC](https://discuss.elastic.co/t/email-notification-for-different-people/32843/6 "2015-10-26T08:03:02Z")

</div>

Since the forums email parsing is broken, here is my comment again:

Use the mutate filter[1] to add a field which contains the email address  
then use that field in the to field in the email output (like you do  
with message in the body field already).

1, [https://www.elastic.co/guide/en/logstash/1.5/plugins-filters-mutate.html](https://www.elastic.co/guide/en/logstash/1.5/plugins-filters-mutate.html)

---

<div class="post-metadata">

**Author:** ![abcfy2](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abcfy2/32/453_2.png) [@abcfy2](https://discuss.elastic.co/u/abcfy2)\
**Post date:** [October 27, 2015, 1:27am UTC](https://discuss.elastic.co/t/email-notification-for-different-people/32843/7 "2015-10-27T01:27:48Z")

</div>

It's a good idea. But I faced an issue: [https://github.com/logstash-plugins/logstash-output-email/issues/33](https://github.com/logstash-plugins/logstash-output-email/issues/33)

When used field as `to`, email plugin crashed.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:25am UTC](https://discuss.elastic.co/t/email-notification-for-different-people/32843/8 "2017-07-06T05:25:21Z")

</div>