topic Splunk IT Service Intelligence : How can I pass the field value to comments (in Action rules) for Notable Event Grouping in Splunk ITSI https://community.splunk.com/t5/Splunk-ITSI/Splunk-IT-Service-Intelligence-How-can-I-pass-the-field-value-to/m-p/267655#M196 <P>Hi,<BR />I am grouping the Notable events on certain conditions and set the action rules for them.<BR />In Alert Actions, we have a section "add a comment". I want this comment to be dynamic based on field value passed.<BR />Currently the static one works like : ISSUE from SERVER got RESOLVED</P> <P>I want this ISSUE field to take dynamic values. I have tried %ISSUE% , $result.ISSUE$ and $ISSUE$, but no luck.</P> Thu, 30 Jan 2025 23:06:27 GMT harshal_chakran 2025-01-30T23:06:27Z Splunk IT Service Intelligence : How can I pass the field value to comments (in Action rules) for Notable Event Grouping https://community.splunk.com/t5/Splunk-ITSI/Splunk-IT-Service-Intelligence-How-can-I-pass-the-field-value-to/m-p/267655#M196 <P>Hi,<BR />I am grouping the Notable events on certain conditions and set the action rules for them.<BR />In Alert Actions, we have a section "add a comment". I want this comment to be dynamic based on field value passed.<BR />Currently the static one works like : ISSUE from SERVER got RESOLVED</P> <P>I want this ISSUE field to take dynamic values. I have tried %ISSUE% , $result.ISSUE$ and $ISSUE$, but no luck.</P> Thu, 30 Jan 2025 23:06:27 GMT https://community.splunk.com/t5/Splunk-ITSI/Splunk-IT-Service-Intelligence-How-can-I-pass-the-field-value-to/m-p/267655#M196 harshal_chakran 2025-01-30T23:06:27Z Re: Spunk IT Service Intelligence : How can I pass the field value to comments (in Action rules) for Notable Event Grouping https://community.splunk.com/t5/Splunk-ITSI/Splunk-IT-Service-Intelligence-How-can-I-pass-the-field-value-to/m-p/267656#M197 <P>Hi Harshal,<BR /> We dont have that capability yet in ITSI. It sounds like a very valid use case and I can follow up with the Product Owners to see when we could get this feature. </P> Fri, 03 Feb 2017 01:23:35 GMT https://community.splunk.com/t5/Splunk-ITSI/Splunk-IT-Service-Intelligence-How-can-I-pass-the-field-value-to/m-p/267656#M197 skadadi_splunk 2017-02-03T01:23:35Z Re: Spunk IT Service Intelligence : How can I pass the field value to comments (in Action rules) for Notable Event Grouping https://community.splunk.com/t5/Splunk-ITSI/Splunk-IT-Service-Intelligence-How-can-I-pass-the-field-value-to/m-p/267657#M198 <P>Thanks skadadi,<BR /> Eagerly waiting for this feature.</P> Fri, 03 Feb 2017 04:14:28 GMT https://community.splunk.com/t5/Splunk-ITSI/Splunk-IT-Service-Intelligence-How-can-I-pass-the-field-value-to/m-p/267657#M198 harshal_chakran 2017-02-03T04:14:28Z