Alerting

Alert email - not getting the complete SQL query from the events

dkgs
Communicator

Hello,

Splunk db connect had returned events with some SQL queries which needs to be send in the alert email for the users from splunk cloud. In the events the complete SQL query is coming , but when we receive them as alert the queries are getting truncated. Is there any way we can get the alerts with SQL queries without getting truncated. Is there any limit in number of  characters of each field send in alert email.

Thank you

Labels (5)
0 Karma

thambisetty
SplunkTrust
SplunkTrust

Try to include attachment in the alert settings.

————————————
If this helps, give a like below.
0 Karma

dkgs
Communicator

@thambisetty Tried including attachment. But its in the same way how we are getting the alert mail. The queries are getting truncated. 

Could you suggest any other way.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...