Aggregation Policies email alert action: how to remove Splunk hardcoded footer

[lperini_splunk]

In ITSI, when triggering the email alert action via NEAP, Splunk ITSI always add a footer text to the mail body.

We remove the footer text in the email alert action config gui and press save, but when we open the config again then Splunk has added the footer again.

There is no footer added in the general mail setting in Splunk.

[lperini_splunk · Accepted solution]

The footer is always set on "HTML & Plain Text" type, 

Please select the option "Plain Text" type and check if the footer is removed.

Here in the step 7 for the Send an email.
https://docs.splunk.com/Documentation/ITSI/latest/EA/Actions#Send_an_email