How to set an email alert for the results of this search:
sourcetype="rum" u=* |where t_done >10000
I tried as per the email setting procedure, but I did not get the email.
Please say the step-by-step procedure.
↧
