From 1b32cce95548741a921a180639c13c48d01d28ca Mon Sep 17 00:00:00 2001 From: ljstella Date: Wed, 2 Apr 2025 10:05:25 -0500 Subject: [PATCH] fixes #394, adds action.email to email output --- contentctl/output/templates/savedsearches_detections.j2 | 1 + 1 file changed, 1 insertion(+) diff --git a/contentctl/output/templates/savedsearches_detections.j2 b/contentctl/output/templates/savedsearches_detections.j2 index 1df24b42..b75df793 100644 --- a/contentctl/output/templates/savedsearches_detections.j2 +++ b/contentctl/output/templates/savedsearches_detections.j2 @@ -73,6 +73,7 @@ action.notable.param.severity = high {% endif %} {% endif %} {% if detection.deployment.alert_action.email %} +action.email = 1 action.email.subject.alert = {{ detection.deployment.alert_action.email.subject | custom_jinja2_enrichment_filter(detection) | escapeNewlines() }} action.email.to = {{ detection.deployment.alert_action.email.to }} action.email.message.alert = {{ detection.deployment.alert_action.email.message | custom_jinja2_enrichment_filter(detection) | escapeNewlines() }}