Splunk search included in email

[ppayaws]

Hello Support ,

Whenever the splunk alert mail is triggered , the triggered mail contains the search keyword lines too, I don't want this.

Thanks,
Swapnil Shingote

[dkeck]

HI,

not sure this is what you mean, but are you talking about the search string? this can be ex- or included in alert email settings.

Find your alert, click edit alert scroll down to Trigger Actions, untick in"Include" the search string option

[dkeck]

If it helped please accept the answer 🙂