Hi Splunkers,
I have a use case as follows:
I have many teams: "Team A, Team B, Team C etc. etc." Now each team has 5-6 members with may switch to other teams on requirement basis. I need to send emails to the team whose count of a field is more than 10. I should not mail to the other team about it.
E.g: Member A of Team "A" has reached a count of 10, I need to send email to only Team A, not Team B or C.
Also, I cannot create lookup of Team and members as it may change very frequently. I need to change the recipient list dynamically as per the count and I should not create as many alerts as the number of Team...
Any pointers would be of great help.
Tried with sendemail command but it doesnot accept field name, it needs static email Id.
Best,
