<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Alert Trigger Description Field in Alerting</title>
    <link>https://community.splunk.com/t5/Alerting/Alert-Trigger-Description-Field/m-p/581313#M13382</link>
    <description>&lt;P&gt;These are values of the fields from the first row of the search&lt;/P&gt;</description>
    <pubDate>Mon, 17 Jan 2022 11:08:31 GMT</pubDate>
    <dc:creator>ITWhisperer</dc:creator>
    <dc:date>2022-01-17T11:08:31Z</dc:date>
    <item>
      <title>Alert Trigger Description Field</title>
      <link>https://community.splunk.com/t5/Alerting/Alert-Trigger-Description-Field/m-p/581294#M13379</link>
      <description>&lt;P&gt;Looking at an existing alert trigger, I notice the description field includes variables of some sort.&lt;/P&gt;&lt;P&gt;e.g.&lt;/P&gt;&lt;P&gt;$result.User$&lt;/P&gt;&lt;P&gt;$result.Message$&lt;/P&gt;&lt;P&gt;Where can I find more information about these variables? What other variables are available to include in the alert description?&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;Thanks&lt;/P&gt;&lt;P&gt;Steve&lt;/P&gt;</description>
      <pubDate>Mon, 17 Jan 2022 09:06:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/Alert-Trigger-Description-Field/m-p/581294#M13379</guid>
      <dc:creator>shusseina</dc:creator>
      <dc:date>2022-01-17T09:06:41Z</dc:date>
    </item>
    <item>
      <title>Re: Alert Trigger Description Field</title>
      <link>https://community.splunk.com/t5/Alerting/Alert-Trigger-Description-Field/m-p/581313#M13382</link>
      <description>&lt;P&gt;These are values of the fields from the first row of the search&lt;/P&gt;</description>
      <pubDate>Mon, 17 Jan 2022 11:08:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/Alert-Trigger-Description-Field/m-p/581313#M13382</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2022-01-17T11:08:31Z</dc:date>
    </item>
    <item>
      <title>Re: Alert Trigger Description Field</title>
      <link>https://community.splunk.com/t5/Alerting/Alert-Trigger-Description-Field/m-p/581820#M13399</link>
      <description>&lt;P&gt;Yep, we figured that.&lt;/P&gt;&lt;P&gt;Is there documentation about $Result and what other attributes, if any, it has.&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;&lt;P&gt;Steve&lt;/P&gt;</description>
      <pubDate>Thu, 20 Jan 2022 06:01:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/Alert-Trigger-Description-Field/m-p/581820#M13399</guid>
      <dc:creator>shusseina</dc:creator>
      <dc:date>2022-01-20T06:01:42Z</dc:date>
    </item>
    <item>
      <title>Re: Alert Trigger Description Field</title>
      <link>https://community.splunk.com/t5/Alerting/Alert-Trigger-Description-Field/m-p/581831#M13400</link>
      <description>&lt;P&gt;&lt;A href="https://docs.splunk.com/Documentation/SplunkCloud/8.2.2109/AdvancedDev/ModAlertsLog" target="_self"&gt;https://docs.splunk.com/Documentation/SplunkCloud/8.2.2109/AdvancedDev/ModAlertsLog&lt;/A&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 20 Jan 2022 06:36:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/Alert-Trigger-Description-Field/m-p/581831#M13400</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2022-01-20T06:36:24Z</dc:date>
    </item>
  </channel>
</rss>

