I have this working on our system. However, I have been asked if it's possible to include the contents of the "message field" in the enable actions of the Splunk Alert? We want to add instructions in that field that will be passed into our open-view system and eventually on to our NOC operators. I am not aware of a Splunk_ARG field for "message field."
... View more