Custom violation description

Hi!
I am trying a create a alert for duplicate values in log. I have parsed the log data.
Below is the query i have been using to find duplicate values. Alert is trigerring as expected, but Issue here is i am trying to pass {{tags.shipreqid}} in custom violation description, but appears to be blank in alert mail.(NOTE-shipreqid contain multiple values as there more than 1 dupliacte values found). Without shipreqid, its difficult to find what value has been dupliacted, and again need to do a manual.

select count() from (SELECT count() FROM Log WHERE message LIKE ‘%somestring%’ facet shipreqid) where count>1

Any help would be much appreciated.

Thank,
Megha

Hi @MeghaNagaraju

Welcome to our Explorers Hub!!

Can you send me the link to the condition that you have created?

thanks

Rodrigo