Inline table not showing in Correlation Search Email Notification

[hperez]

I created a correlation search with only two pipes, table and rename. I added inline table to the email notification but it is not showing. I have another alert for which this works with a similar search. The only difference is another user created it. Is there any role dependency to do this? Not sure what else could cause this.

[_joe]

Not sure if your still fighting with this, but I am guessing it is part of this bug:

2021-04-08

SOLNESS-26448

Missing payload attribute for SendEmail Adaptive response action in Correlation Search Editor Workaround: Send the search results as file attachment.

When configuring alerts, it seems to be OK if email is the first action.