Should the list of fields be separated by a space or comma in the per result throttling text box for alerts?

[kbecker]

When setting up throttling in a alert the Per result throttling field text box doesn't indicate if your list of fields should be separated by a space or comma, does anybody know the correct syntax?

Thanks,

[ChrisG]

It is a comma-delimited field list. See alert.suppress.fields in savedsearches.conf. We have updated the topic in the Alerting Manual to include this information.