Pass an Alert Variable to NetworkBrain

You can access the field value of the first result row returned by a search using $result.fieldname$. For example, get the device name from the log $result.device$. Also, a new variable for search can be found by clicking the Extract New Fields and that can be passed to NetworkBrain by using $result.fieldname$. See Configure alert actions for more information.