topic Re: Insert Date Into Subject of Email Alert in Alerting

Insert Date Into Subject of Email Alert

karinerivet — Thu, 27 Oct 2011 23:20:42 GMT

When creating an alert, is it possible to insert a date in the email subject line, such as the previous days date?

imrago — Tue, 06 Dec 2011 10:23:10 GMT

Hi,

I succeeded to add a date to the subject by modifying the sendmail.py file, an example:

yesterday = datetime.datetime.now() - datetime.timedelta(days = 1)
message['Subject'] = subject + " " + yesterday.strftime("%d.%m.%Y")

karinerivet — Tue, 06 Dec 2011 15:34:06 GMT

Where is the sendmail.py file, and how do I modify it?

imrago — Tue, 06 Dec 2011 19:30:33 GMT

It is located in the /opt/splunk/etc/app/search/bin/ directory.

It is a python script and it can be modified with any text editor. Keep in mind that it will be probably overwritten on the next Splunk update.