Can we customize the message in the alert?

[vrmandadi]

I have an alert which which when triggered will send a mail,the mail has a link to dashboard in the message section,I want the link of the dashboard to be customized according the results of the alert,The results are from a dashboard where the cf_appname is are selected from a drop down and a region from a radio button.I want the link to of the dashboard where the region and cf_appname is selected according to the result

cf_app_name RTR_Call region

---

dashboard-service GET /api/v1/users/vehicles NA

Is this possible in splunk ?

[frobinson_splun]

Hi @vrmandadi,
As a start, you might take a look at this example in our Alerting manual. It has a similar use case, where email recipients are determined according to search results. If it fits your use case, you could use tokens to capture result field values and pass them to a link target.

http://docs.splunk.com/Documentation/Splunk/6.5.0/Alert/Emailnotification#Send_email_to_different_re...

If I'm understanding your use case correctly, it sounds like the linked dashboard has inputs that you want to customize. You should be able use URL query string parameters to set the token values representing these.

See these topics for more info:
http://docs.splunk.com/Documentation/Splunk/6.5.2/Viz/tokens#Define_tokens_for_form_inputs

http://docs.splunk.com/Documentation/Splunk/6.5.2/Viz/Dynamicdrilldownindashboardsandforms#Specify_a...
Note the syntax for linking to a form and passing in URL query string parameters to set its tokens.

Hope this helps!