Hi Team,
trying to add the log message in the alert body to be sent when triggered. Tried with the below syntax, no luck… it comes empty.
{{#ctx.results.0.hits.hits}}
> {{_source.logs.loggerName}}:
{{/ctx.results.0.hits.hits}}
Can someone pls advise what is missing here ? Im using the extraction query to create the alert which I took from discover(inspect)
Thanks in advance