app name is name given to particular section of text of log, however there is not such field name appname in either selected field or interesting field of result obtained by triggering queries.
My query is like this,
APP1 OR APP2 OR APP3 java.io.IOException
so whenever this pattern is occurred a new alert will be raised.
alert are getting raised perfectly but we're unable to identified for which APP we're getting that particular error.
suppose alert is raised is raised due to failure of APP2 so we expect APP2 name in our subject of Alert.
as suggested by @nawazns5038, use $result.fieldname$ to extract appname and displayed it to subject but unfortunately whenever we trigger this query we don't get that selected text which we want to display as subject as selected field or interesting field.
We can create 3 separate alert for each app and email subject as hardcode app, but I think this is very redundant and unnecessary.
... View more