Hi
I have a lookup file that map log sources with its application name. I want to have this application name in my e-mail alert.
I did it with host ( $result.host$) but it's didnt seems to work with the lookups field.
Maybe anyone has an idea on how I can process ?
Thanks
If you do table host at end of your search and then do $result.host$ in alert , does it work? Also what is your alert query.