how to add description to alert e-mail

[0range]

How to send e-mail alerts from Splunk with text description of the event?

[sloshburch]

Check out my answer in http://answers.splunk.com/answers/41129/use-of-the-search-description-field-in-an-alert-email - I think it might be what you're looking for.

[jtrucks]

You will have to have the results of the search be descriptive in some way and have the results sent with the email (inline is a good idea here).

Alternatively, you can have a script triggered and then you can use the script to send the email, which will allow you to produce whatever output you want, including data from the results of the search itself.