Hello Support ,
Whenever the splunk alert mail is triggered , the triggered mail contains the search keyword lines too, I don't want this.
Thanks,
Swapnil Shingote
HI,
not sure this is what you mean, but are you talking about the search string? this can be ex- or included in alert email settings.
Find your alert, click edit alert scroll down to Trigger Actions, untick in"Include" the search string option
If it helped please accept the answer 🙂