https://community.splunk.com/t5/Splunk-Enterprise-Security/Manual-Notable-Tittle/m-p/509532#M9017 <P><SPAN>I was trying to create a manual notable event using "sendalert notable". But the name of the notable is coming as "Manual Notable Event- Rule". How can I name the notable to exactly what I want?</SPAN><BR /><SPAN>Please note that I want to create the notable through sendalert only.</SPAN></P> Thu, 16 Jul 2020 14:11:14 GMT prashanthberam 2020-07-16T14:11:14Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Manual-Notable-Tittle/m-p/509532#M9017 <P><SPAN>I was trying to create a manual notable event using "sendalert notable". But the name of the notable is coming as "Manual Notable Event- Rule". How can I name the notable to exactly what I want?</SPAN><BR /><SPAN>Please note that I want to create the notable through sendalert only.</SPAN></P> Thu, 16 Jul 2020 14:11:14 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Manual-Notable-Tittle/m-p/509532#M9017 prashanthberam 2020-07-16T14:11:14Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Manual-Notable-Tittle/m-p/547774#M9879 <P>Did you ever find a solution? I am wondering the same thing. I see that we can control certain fields such as urgency via the sendalert notable command but the name/title field is eluding me.</P> Tue, 13 Apr 2021 16:25:42 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Manual-Notable-Tittle/m-p/547774#M9879 glados 2021-04-13T16:25:42Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Manual-Notable-Tittle/m-p/547775#M9880 <P>I'm not sure that this is possible without modifying the underlying alert action or cloning it and creating a modified version.</P><P>However, there is a workaround that can provide similar functionality without using an alert action:</P><LI-CODE lang="markup">| makeresults | eval somefield="Some text", search_name="SearchName", source=search_name | collect index=notable source="SearchName"</LI-CODE><P>&nbsp;</P> Tue, 13 Apr 2021 16:58:58 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Manual-Notable-Tittle/m-p/547775#M9880 ericjorgensenjr 2021-04-13T16:58:58Z