I am still running Splunk 5.0.1.2, but I am wondering if there is a way to adjust the splunk email alert content / form without having to manipulate the python script? if not does anyone know if this is adjustable in 6.0?
Nothing has changed for 6.0 in terms of formatting the email. As before, if you don't like the email, you can either (1) edit sendemail.py or (2) create a scripted alert and do it however you prefer in your script.
Here are my favorite answers from many previous questions on this topic.
Nothing has changed for 6.0 in terms of formatting the email. As before, if you don't like the email, you can either (1) edit sendemail.py or (2) create a scripted alert and do it however you prefer in your script.
Here are my favorite answers from many previous questions on this topic.
