We are developing a ModularAction using the CIM framework, and we want to know how to get the following information:
trigger_date
trigger_timeHMS
trigger_time
These are the possible tokens user can enter into the config according to this doc:
https://docs.splunk.com/Documentation/Splunk/7.2.5/AdvancedDev/ModAlertsLog#Pass_search_result_values_to_alert_action_tokens
Thank you very much in advance!
↧
