Need help on alert

[jackin]

• I have some error keywords. These words all come in Raw data. I put them in a lookup file, lookup file name is mylookup.csv . Now I need to get an email alert when I have the word triggered in that file. Thanks in advance

[richgalloway · Accepted solution]

It would help to know what you've tried so far and what results you got.

I'm hoping this is not one of the failed attempts:

index=foo [ inputlookup mylookup.csv | return 1000 $bar ]

[jackin]

Thanks @richgalloway 

It's not working. 

[richgalloway]

What does that mean?  "It's not working" doesn't paint much of a picture I can use to help you.

Please share the exact query you ran (did you replace "foo" and "bar" with real values?) and the results you received.

[jackin]

Sorry man 

I forgot to replace "bar" with real values.