I have an alert that fires and while generating the alert, uses appendpipe to collect fields and generate an event in another index for collection by a third party tool.
Is there a way to add the View Results link to the event that's generated so that it can map it in our third party tool to link the analysts back to the original alert?
I figured it out, the search link is saved under the search_link value.
I figured it out, the search link is saved under the search_link value.