This defines the delivery target for the alert, currently only emails and ingest are supported.
The environment name to use in the email content header, defaults to Splunk. Define it as the fully qualified address of the environment so it appears as a valid link in the email, example: https://splunk.example.com
Mandatory for emails delivery: Select the email system account to be used for the delivery.
Mandatory for emails delivery: A comma separated list of recipients.
Instructs the alert to consider the orange state as an alerting state, otherwise it will be considered a non-alerting state. Default behavior is not to consider orange as a non alerting state.
(for html email only) Instructs the alert to include charts generation in the email, which depend on the TrackMe type of entity. If enables, TrackMe will execute a fast search againsts TrackMe metrics, generate and include an SVG chart in the html email.
(for html email only) Instructs the alert to use a specific theme for the charts in the email.
This value is used to build the drilldown link, This should be the base URL for Splunk Web such as: https://splunk.example.com