Splunk Enterprise Security

Inline table not showing in Correlation Search Email Notification

New Member

I created a correlation search with only two pipes, table and rename. I added inline table to the email notification but it is not showing. I have another alert for which this works with a similar search. The only difference is another user created it. Is there any role dependency to do this? Not sure what else could cause this.

Labels (1)
0 Karma