How to get the row text from inputlookup in a vari...

Splunk Search

HI!

I am using a CSV file to catch some alerts, and that part works fine, I catch all my alerts.

index="main"  [inputlookup linux_alerts.csv | table AlertMsg | rename AlertMsg as search | format ]

The file goes like this:
AlertMsg
Some alert text 1
Some alert text 2
Some other stuff

What I would like is when one of these row is triggered to have it in a variable for the body of the email. Something like $result.AlertMsg$

Thanks

Get Updates on the Splunk Community!

Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...

Are you a member of the Splunk Community?