How do I send an email alert only with some information from the message field?
IP: $${message.fields.ip}
Name: $${message.fields.name}
Account: $${message.fields.accountName}
Did not work.
do you have that information you want to include already extracted into single fields?
I have the information inside the message field.
you can’t parse the message field just for notifications - means:
If you want specific information available to use in the notification you need to extract that during message ingest.
How do I extract? Would there be any step by step?
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.