Splunk IT Service Intelligence

Aggregation Policies email alert action: how to remove Splunk hardcoded footer

lperini_splunk
Splunk Employee
Splunk Employee

In ITSI, when triggering the email alert action via NEAP, Splunk ITSI always add a footer text to the mail body.

We remove the footer text in the email alert action config gui and press save, but when we open the config again then Splunk has added the footer again.

There is no footer added in the general mail setting in Splunk.

Labels (3)
0 Karma
1 Solution

lperini_splunk
Splunk Employee
Splunk Employee

The footer is always set on "HTML & Plain Text" type, 

Please select the option "Plain Text" type and check if the footer is removed.

Here in the step 7 for the Send an email.
https://docs.splunk.com/Documentation/ITSI/latest/EA/Actions#Send_an_email

lperini_splunk_0-1663917445582.png

 

View solution in original post

0 Karma

lperini_splunk
Splunk Employee
Splunk Employee

The footer is always set on "HTML & Plain Text" type, 

Please select the option "Plain Text" type and check if the footer is removed.

Here in the step 7 for the Send an email.
https://docs.splunk.com/Documentation/ITSI/latest/EA/Actions#Send_an_email

lperini_splunk_0-1663917445582.png

 

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...