https://community.splunk.com/t5/Alerting/Inject-username-in-email-alert/m-p/549373#M10445 <P>I have a Cisco ASA and my users VPN into it. I have created an alert based on the search below and it works. In the body of the alert it lists the "username = blah" (with the user's name"). Is it possible to inject that username into the subject of the email alert?</P><P>index=netfw sourcetype="cisco:asa" eventtype=cisco_vpn_end Cisco_ASA_message_id=113019</P> Mon, 26 Apr 2021 20:35:35 GMT scotg 2021-04-26T20:35:35Z https://community.splunk.com/t5/Alerting/Inject-username-in-email-alert/m-p/549373#M10445 <P>I have a Cisco ASA and my users VPN into it. I have created an alert based on the search below and it works. In the body of the alert it lists the "username = blah" (with the user's name"). Is it possible to inject that username into the subject of the email alert?</P><P>index=netfw sourcetype="cisco:asa" eventtype=cisco_vpn_end Cisco_ASA_message_id=113019</P> Mon, 26 Apr 2021 20:35:35 GMT https://community.splunk.com/t5/Alerting/Inject-username-in-email-alert/m-p/549373#M10445 scotg 2021-04-26T20:35:35Z