https://community.splunk.com/t5/Alerting/adjust-the-content-with-csv-file-in-alert-email/m-p/413563#M11328 <P>i defined an alert to send email to me , but i found the attachment ( .csv file ) in the alert mail is incomplete, it miss some importance column, </P> <P>i wonder how to alter the content in the csv file ? </P> Fri, 29 Jun 2018 05:27:50 GMT lllidan 2018-06-29T05:27:50Z https://community.splunk.com/t5/Alerting/adjust-the-content-with-csv-file-in-alert-email/m-p/413563#M11328 <P>i defined an alert to send email to me , but i found the attachment ( .csv file ) in the alert mail is incomplete, it miss some importance column, </P> <P>i wonder how to alter the content in the csv file ? </P> Fri, 29 Jun 2018 05:27:50 GMT https://community.splunk.com/t5/Alerting/adjust-the-content-with-csv-file-in-alert-email/m-p/413563#M11328 lllidan 2018-06-29T05:27:50Z https://community.splunk.com/t5/Alerting/adjust-the-content-with-csv-file-in-alert-email/m-p/413564#M11329 <P>Fix your search. The CSV is based off the fields in your search. There is nothing that removes fields once the search is complete.</P> Sat, 30 Jun 2018 04:03:06 GMT https://community.splunk.com/t5/Alerting/adjust-the-content-with-csv-file-in-alert-email/m-p/413564#M11329 woodcock 2018-06-30T04:03:06Z