Does anyone know how to add a return carriage to the ESA notification templates?
for instance, I want a simple email notification with the following, but broken up by newlines.
time=${time?datetime }
AlertName=${moduleName }
SIEMAlertid=${id }
severity=${severity}
source=${eventSourceId}
systemOrigination=${events[0].device_ip}
MACAddress=${events[0].eth_dst}
Event=${events[0].event_desc}
Location=${events[0].index}
Joe,
You can try inserting:
UPCOMING OUT OF OFFICE
PTO: October 3-6
<http://rsa.im/2pfI6hJ>