syslog email alerts not working

[abdulcc]

I can get my logs fine and view them fine with the plugin

Original config file
// Field Mappings, adjust to match the haloe table columns in use
$haloe_config["haloeTable"] = "syslog";
$haloe_config["incomingTable"] = "syslog_incoming";
$haloe_config["removeTable"] = "syslog_remove";
$haloe_config["alertTable"] = "syslog_alert";
$haloe_config["dateField"] = "date";
$haloe_config["timeField"] = "time";
$haloe_config["priorityField"] = "priority";
$haloe_config["facilityField"] = "facility";
$haloe_config["hostField"] = "host";
$haloe_config["textField"] = "message";
$haloe_config["id"] = "seq";

My config file
// Field Mappings, adjust to match the haloe table columns in use
$haloe_config["haloeTable"] = "logs";
$haloe_config["incomingTable"] = "syslog_incoming";
$haloe_config["removeTable"] = "syslog_remove";
$haloe_config["alertTable"] = "syslog_alert";
$haloe_config["dateField"] = "date";
$haloe_config["timeField"] = "time";
$haloe_config["priorityField"] = "priority";
$haloe_config["facilityField"] = "facility";
$haloe_config["hostField"] = "host";
$haloe_config["textField"] = "msg";
$haloe_config["id"] = "seq";


I can create an alert rule, I can see it however the emails are not being forwarded. The only thing changed is the field msg. Do I need to change elsewhere?

Is there anything else I should change

Also
Data is being written to my syslog_alerts table but not on my syslog incoming or syslog remove table.


Thanks