The key to the question is "results different". As long as the results can be derived from the results that triggered the alert, then it is possible. There are a number of ways. For instance, you could write out the results to a csv file, and instead of "send email", trigger a second report that will read the csv and create the results to be emailed. You could also rewrite the report so that it is creating the results that need to be emailed, and doing the decisioning step in an appendpipe or eventstats , so that the original data is still available after the decision to alert is made. Or, you could take the final results that set off the alert, and use them as input to the map command to (re-)pull the event records to send. ... View more