I have setup a scheduled search, which sends the alert to an email id, who does not have access to Sumo Logic.
Right now in the email alert it says:
Displaying 25 out of 60 or more results. Click here to view full results in Sumo Logic.
Since that user does not have access to Sumo Logic, so he/she can not view remaining results by clicking "here".
Is it possible to display all the results in the email alert?
A work-around to it is to check "Results as a CSV attachment (max 5MB or 1,000 results)" in the configuration of scheduled search. This way all the results of the scheduled search (having combined size less than or equal to 5MB or total number of results less than or equal to 1,000 results) can be sent via email as a CSV attachment.
You can read more about this here.
Please sign in to leave a comment.