By default, fields do not show up when drilldown on email alert links or RSS feeds. We do not generate by default for performance reasons. You can enable Splunk to show fields when drilldown on email alerts or RSS Feeds by setting:
search = <your search>
dispatch.buckets = 1
dispatch.buckets = 1 will extract the fields and display the fields upon drilldown.
Note: performance can be affected.