https://community.splunk.com/t5/Alerting/Is-there-a-way-to-change-the-font-size-or-bold-text-in-alert/m-p/247638#M4625 <P>Hi </P> <P>Is there a way to change font size or Bold text in email alerts? Can this be done by scripting?</P> Fri, 08 Jul 2016 21:31:14 GMT kiran331 2016-07-08T21:31:14Z https://community.splunk.com/t5/Alerting/Is-there-a-way-to-change-the-font-size-or-bold-text-in-alert/m-p/247638#M4625 <P>Hi </P> <P>Is there a way to change font size or Bold text in email alerts? Can this be done by scripting?</P> Fri, 08 Jul 2016 21:31:14 GMT https://community.splunk.com/t5/Alerting/Is-there-a-way-to-change-the-font-size-or-bold-text-in-alert/m-p/247638#M4625 kiran331 2016-07-08T21:31:14Z https://community.splunk.com/t5/Alerting/Is-there-a-way-to-change-the-font-size-or-bold-text-in-alert/m-p/247639#M4626 <P>Out of the box Splunk's email system escapes all HTML elements, so if you used <CODE>&lt;b&gt;this is bold&lt;/b&gt;</CODE> it would appear literally.</P> <P>You can change that behaviour quick and dirty by making a backup of etc/apps/search/bin/sendemail.py, modifying the original by changing <CODE>${msg|h}</CODE> to <CODE>${msg}</CODE> in line 672, and then using HTML in your alert email texts.<BR /> HOWEVER, you have to be aware of a few things:</P> <UL> <LI>This won't survive an upgrade, you'll have to reapply the change every time</LI> <LI>This change is global to your Splunk instance, affecting every single email sent</LI> <LI>Unexpected things may happen if existing emails already contain HTML-like things</LI> <LI>Bad things may happen if your users craft email alerts to mess with recipients' inboxes</LI> </UL> <P>A nicer way would be to write a custom alert action as a kind of "advanced sendemail" without the escaping of HTML elements, and only grant permission to this to advanced users. That wouldn't be global, would survive upgrades, would be shareable on splunkbase, but would be a bit more effort.</P> Sat, 09 Jul 2016 08:03:44 GMT https://community.splunk.com/t5/Alerting/Is-there-a-way-to-change-the-font-size-or-bold-text-in-alert/m-p/247639#M4626 martin_mueller 2016-07-09T08:03:44Z https://community.splunk.com/t5/Alerting/Is-there-a-way-to-change-the-font-size-or-bold-text-in-alert/m-p/247640#M4627 <P>Adding to Martin's point, you may as well create a scripted solution which will give you more flexibility. </P> <P>Moreover if you are just copying the sendemail.py to your own app it will not be overwritten upon upgrade but may malfunction upon the original sendemail.py structure change for on splunk instance. I have been following the same method for colors, font, resizing text + own scripted alerts. </P> Sat, 09 Jul 2016 08:19:51 GMT https://community.splunk.com/t5/Alerting/Is-there-a-way-to-change-the-font-size-or-bold-text-in-alert/m-p/247640#M4627 linu1988 2016-07-09T08:19:51Z https://community.splunk.com/t5/Alerting/Is-there-a-way-to-change-the-font-size-or-bold-text-in-alert/m-p/247641#M4628 <P>If you have a solution built, do consider sharing that on splunkbase <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Sat, 09 Jul 2016 08:21:08 GMT https://community.splunk.com/t5/Alerting/Is-there-a-way-to-change-the-font-size-or-bold-text-in-alert/m-p/247641#M4628 martin_mueller 2016-07-09T08:21:08Z https://community.splunk.com/t5/Alerting/Is-there-a-way-to-change-the-font-size-or-bold-text-in-alert/m-p/247642#M4629 <P>Hi Linu1988, Thanks for the response!Can you share the script for resizing text.</P> Sat, 09 Jul 2016 20:42:34 GMT https://community.splunk.com/t5/Alerting/Is-there-a-way-to-change-the-font-size-or-bold-text-in-alert/m-p/247642#M4629 kiran331 2016-07-09T20:42:34Z