So I'm trying to pipe a search query to sendemail to email specific messages based on search results and format the message/body of that email to use line breaks and paragraphs rather than one long message. (Splunk 6.1.4)
search query | sendemail to=email_address from=from_email subject=alert_subject message="Alert first line \r\n second line with $result.Field$ \r\n third line"
I've tried:
\n
\r\n
\r\n\r\n
\n\r
[\r\n]
[\n\r]
No luck. And I know it's not outlook messing up the message because the default footer is correctly displayed with proper line breaks. The default footer should be: "If you believe you've received this email in error, please see your Splunk administrator.\r\n\r\nsplunk > the engine for machine data." according to the documentation but \r\n doesn't seem to work for me.
I can format the message correctly using the built in alert tool but I can't customize the FROM address using the alert app, so trying to get sendemail to work.
http://docs.splunk.com/Documentation/Splunk/6.1.4/SearchReference/Sendemail
... View more