Hi, I have over 150 alerts to which I have to add new lines of code like below example. I am updating each alert manually and it is getting tedious. Is there a way to update all the alerts in bulk? I also want to add additional alert action (send Webex teams notification) along with the existing send email action. Can anyone please suggest a way to do it?
eg: old alert search
|makeresults | eval message="Hi How are you"
New alert search
|makeresults| eval message="Hi How are you"| eval message2= "this is message2" |eval message3="this is message3"