I have defined an alert to be emailed to me, but I do not see an option to attach the csv file of the result. What do I have to do to add the result without writing a script.
The only option I see is to add sendemail at the end of the search and ignore the alert email settings.
Hi huaraz
in version 6.1.4 there is an option for CSV
make a search save it as an alert by following these step
1) in Title field give your alert name
2) click on Schedule in Alert time field then to next
3) Check a field Send Email
4) Fill the option that you will see
5) In Include field you will see Attach CSV check it and save your alert
if you save a search in the serch bar, the csv option should be more visible.(as describe above)
if you go via saved searches, after you enable email action, you've got to click just below on "click to select email action" (it's in blue with narrow policy so easy to miss) to find out the interface where you can select csv to be attached.
What version of Splunk are you using? In 6.2 there is an option for CSV under the email alert settings. See attached screenshot:
Are you trying to send a different CSV file then what is produced by the alert results?
