Extracting field data from alert to be emailed

[reaver3020]

I have an alert configured to automatically send an email upon a user account locking. I'm looking for the email to only include four fields: a specific event code (EventCode=4740), message (Message=A user account was locked out.), Caller Computer Name, and a timestamp of when the event occurred. How do I go about accomplishing this?

Thank you in advance.

[maciep]

can you share your current search? I mean, it should just be a matter of tabling those fields...and possibly creating them first if needed.