You can try this,
| makeresults | eval data="log1:message information category status Ip data testmail1@mail.com,
log2:message information category status Ip data testmail2@mail.com,
log3:message information category status Ip data testmail3@mail.com" | makemv delim="," data | mvexpand data | eval abc=case(like(data, "log1%"), "testmail1@mail.com", like(data, "%log2%"), "testmail2@mail.com", like(data, "%log3%"), "testmail3@mail.com") | eval content=case(like(data, "%log1%"), data, like(data, "%log2%"), data, like(data, "%log3%"), data) |sendemail to=abc message=content
... View more