Hey \0 I have problems with sending notifications in telegram profiles.yaml name: default_ip_remediation debug: true filters: - Alert.Remediation == true && Alert.GetScope() == "Ip" decisions: - type: ban duration: 4h #duration_expr: Sprintf('%dh', (GetDecisionsCount(Alert.GetValue()) + 1) *…

I just tried to replicate here my http_tele.yaml type: http # Don't change name: http_tele # Must match the registered plugin in the profile # One of "trace", "debug", "info", "warn", "error", "off" log_level: info # group_wait: # Time to wait collecting alerts before relaying a…

Here is http.yaml. token and chat_id fictitious type: http # Don't change name: http_default # Must match the registered plugin in the profile # One of "trace", "debug", "info", "warn", "error", "off" log_level: info group_wait: 30s # Time to wait collecting alerts before relayin…

Can you comment out these group_wait: 30s # Time to wait collecting alerts before relaying a message to this plugin, eg "30s" group_threshold: 5 # Amount of alerts that triggers a message before <group_wait> has expired, eg "10" max_retry: 4 # Number of attempts to relay messages …

It does not help type: http # Don't change name: http_default # Must match the registered plugin in the profile # One of "trace", "debug", "info", "warn", "error", "off" log_level: info # group_wait: 30s # Time to wait collecting alerts before relaying a message to this plugin, eg…

And when you updated the yaml you restarted the crowdsec service?

Yes, I restarted the docker container

And if you exec into the crowdsec container you can curl curl -s https://api.telegram.org/botXXX:YYY/getUpdates This with no errors? obviously replace the bot token as you did.

done, no errors. command runs fine

Okay, I need to test a docker setup. You running a compose stack or independent? Could you also provide output of cscli version

Compose Stack. Traefik - CrowdSec - Bouncer-traefik cscli version 2023/05/09 11:25:56 version: v1.4.6-5f71037b40c498045e1b59923504469e2b8d0140 2023/05/09 11:25:56 Codename: alphaga 2023/05/09 11:25:56 BuildDate: 2023-02-09_14:37:12 2023/05/09 11:25:56 GoVersion: 1.19.5 2023/05/09 11:25:56 Platfor…

So. I put curl in the crowdsec container and ran the command to send a message from the container curl -s -o /dev/null -X POST -H "Content-Type: application/json" -d "{\"chat_id\": \"{-MY_ID}\", \"text\": \"test_message\", \"disable_notification\": false}" https://api.telegram.org/bot{MY_TOKEN}/sen…

Telegram Notification Bug

iiAmLoz May 22, 2023, 1:05pm 21

Do you have 2 yaml files with the same http_default name?

Topic		Replies	Views
Telegram notification : plugin not enabled? crowdsec	4	1017	August 10, 2023
Email notification not sent crowdsec	14	733	September 26, 2024
Enable notification service won't start crowdsec	5	721	April 20, 2023
Discord notification like Telegram/gotify	0	79	February 17, 2025
No success setting up notifications crowdsec	5	293	April 30, 2025

Telegram Notification Bug

Related topics