I have alerts in SIEM based on built-in rules. In Action Tab for Rule I setuped : Send Alert to Email and using this :
Everything works perpect. but I would like sent this fields (for example) in json format (for now - it's clear text) for parsing.
Is it possible ?