how to add add text from file - splunk alerts

[marellasunil]

I wanted to add a text (What action need to be taken) for each splunk alerts, Can somebody help me to do?

[meenal901]

For conditional action, you will need to put it in a lookup file (based on exception/alarm message)
and add it to search results.
Use table and transpose to display all the data in a user-friendly format.
e.g:

Time of Exception: 2015/11/08 15:55:09
Alarm severity: High
Exception message: Unable to connect to server
Stack Trace: ---
POC: ProductionsupporDL
Action: Contact , Raise a ticket at OR Restart the server

[woodcock]

Go to Settings -> Server settings -> Email settings and modify the Email footer text. This is included in all emails that your Search Head will send.

[DavidHourani]

This will be included in all emails right ? It won't be a conditional footer, would it ?

[woodcock]

Correct, it is a .sig for all emails.

[richgalloway]

The lookup command may be helpful, but it's hard to know without more detail about what you are trying to accomplish.