Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Is it possible to change the table fields being sent with the sendemail command?

$
0
0
Hello, I'm trying to find a way to use search result fields to address an e-mail, but remove those fields in the inline table in the body of the e-mail. Here is an example of the search results: Field_1, Field_2, Contact Value_F1_1, Value_F2_2, contact@domain.com Value_F1_2, Value_F2_3, contact@domain.com Value_F1_3, Value_F2_2, contact@domain.com The send e-mail command I am using needs the Contact field to determine who to send the e-mail to: ... |sendemail to=$result.Contact$ subject=subject sendresults=true format=table As you can imagine, the inline table in the e-mail contains the Contact field as well. What I'd like to know is whether there is some way to remove the field from the inline table sent in the e-mail. Thank you and best regards, Andrew

Viewing all articles
Browse latest Browse all 47296


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>