how to set email alert for the search result for this search
"sourcetype="rum" u=* |where t_done >10000".
i tried as per the email setting procedure.but i didnot get the email.
please say the step by step procedure .
↧
