| eval Alert_Message_DISK = status_disk.": Disk utilization for ".host." is ".total_disk_utilization."%"
| eval Alert_Message_DISKD = status_diskD.": Disk utilization for ".host." is ".disk_D."%"
| table Alert_Message
I want to put these two string fields created using "eval" under one "Alert_Message". thank you.
You mean like this?
| eval Alert_Message=mvappend(Alert_Message_DISK,Alert_Message_DISKD)