Json in alert result (message)

Elastic Security SIEM
1

Good Day
I have alerts in SIEM based on built-in rules. In Action Tab for Rule I setuped : Send Alert to Email and using this :
{{#context.alerts}}
Username: {{user.name}}
Host: {{host.name}}
{{/context.alerts}}

Everything works perpect. but I would like sent this fields (for example) in json format (for now - it's clear text) for parsing.
Is it possible ?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.