# Threshold Rule type - not able to send more than three field values in email action

**URL:** <https://discuss.elastic.co/t/threshold-rule-type-not-able-to-send-more-than-three-field-values-in-email-action/280309>\
**Category:** SIEM\
**Tags:** elastic-stack-alerting, detection-rules\
**Created:** [August 3, 2021, 12:38pm UTC](https://discuss.elastic.co/t/threshold-rule-type-not-able-to-send-more-than-three-field-values-in-email-action/280309 "2021-08-03T12:38:53Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jancodenew](https://avatars.discourse-cdn.com/v4/letter/j/87869e/32.png) [@jancodenew](https://discuss.elastic.co/u/jancodenew)\
**Post date:** [August 3, 2021, 12:38pm UTC](https://discuss.elastic.co/t/threshold-rule-type-not-able-to-send-more-than-three-field-values-in-email-action/280309/1 "2021-08-03T12:38:53Z")

</div>

Hi,

Threshold rule type is not allowing to send more than three field values in email action body. Group by is allowed to do onyl for three fields and those field values are only are available in the aggregated alert output.

{{#context.alerts}}  
{{#signal.threshold\_result.terms}}  
{{value}}  
{{/signal.threshold\_result.terms}}  
{{/context.alerts}}

Please let me know if there is any option to add more field information's in the threshold alert from the log events.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 31, 2021, 12:39pm UTC](https://discuss.elastic.co/t/threshold-rule-type-not-able-to-send-more-than-three-field-values-in-email-action/280309/2 "2021-08-31T12:39:29Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.