I wanted to add a text (What action need to be taken) for each splunk alerts, Can somebody help me to do?
For conditional action, you will need to put it in a lookup file (based on exception/alarm message)
and add it to search results.
Use table and transpose to display all the data in a user-friendly format.
e.g:
Time of Exception: 2015/11/08 15:55:09
Alarm severity: High
Exception message: Unable to connect to server
Stack Trace: ---
POC: ProductionsupporDL
Action: Contact , Raise a ticket at OR Restart the server
Go to Settings
-> Server settings
-> Email settings
and modify the Email footer
text. This is included in all emails that your Search Head will send.
This will be included in all emails right ? It won't be a conditional footer, would it ?
Correct, it is a .sig for all emails.
The lookup command may be helpful, but it's hard to know without more detail about what you are trying to accomplish.