topic Splunk alerts use values from search in Alerting https://community.splunk.com/t5/Alerting/Splunk-alerts-use-values-from-search/m-p/148669#M2402 <P>Is there a way to send alerts to email addresses derived from my search? For example, recording an email address that has failed to log in to our web app N times and sending an alert to that user?</P> <P>If not, how do we get this on the product roadmap?</P> Wed, 10 Dec 2014 19:35:23 GMT bbegyperkspot 2014-12-10T19:35:23Z Splunk alerts use values from search https://community.splunk.com/t5/Alerting/Splunk-alerts-use-values-from-search/m-p/148669#M2402 <P>Is there a way to send alerts to email addresses derived from my search? For example, recording an email address that has failed to log in to our web app N times and sending an alert to that user?</P> <P>If not, how do we get this on the product roadmap?</P> Wed, 10 Dec 2014 19:35:23 GMT https://community.splunk.com/t5/Alerting/Splunk-alerts-use-values-from-search/m-p/148669#M2402 bbegyperkspot 2014-12-10T19:35:23Z Re: Splunk alerts use values from search https://community.splunk.com/t5/Alerting/Splunk-alerts-use-values-from-search/m-p/148670#M2403 <P>See this link.<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.2.0/Alert/Setupalertactions#Use_tokens_in_email_notifications">http://docs.splunk.com/Documentation/Splunk/6.2.0/Alert/Setupalertactions#Use_tokens_in_email_notifications</A></P> <P>You should be able to configure you "To" addresses with the fields from search result.</P> <P>Alternately, your can look at the "sendemail" command of the search language to send the email alert from search itself.</P> Wed, 10 Dec 2014 19:53:14 GMT https://community.splunk.com/t5/Alerting/Splunk-alerts-use-values-from-search/m-p/148670#M2403 somesoni2 2014-12-10T19:53:14Z Re: Splunk alerts use values from search https://community.splunk.com/t5/Alerting/Splunk-alerts-use-values-from-search/m-p/148671#M2404 <P>Ron Naken's RedAlert app can allow you to use field value(s) in your alerts. It also provides some very nice alert tracking. <A href="https://apps.splunk.com/app/1730/">https://apps.splunk.com/app/1730/</A></P> Fri, 12 Dec 2014 00:53:54 GMT https://community.splunk.com/t5/Alerting/Splunk-alerts-use-values-from-search/m-p/148671#M2404 jbrodsky_splunk 2014-12-12T00:53:54Z