https://community.splunk.com/t5/Getting-Data-In/webhook-unable-to-read-POST-data/m-p/360262#M95941 <P>I was having the same issue and was able to find the answer with the following StackOverflow article, excerpted here:</P> <P>The PHP superglobal $_POST is only is supposed to wrap data that is either</P> <UL> <LI>application/x-www-form-urlencoded (standard content type for simple form-posts) or</LI> <LI>multipart/form-data-encoded (mostly used for file uploads)</LI> </UL> <P>You need to fetch it yourself in <STRONG>RAW</STRONG> format with:<BR /> file_get_contents('php://input') </P> <P><A href="https://stackoverflow.com/questions/8893574/php-php-input-vs-post" target="_blank">https://stackoverflow.com/questions/8893574/php-php-input-vs-post</A></P> Wed, 30 Sep 2020 00:07:59 GMT daxsmartpak 2020-09-30T00:07:59Z https://community.splunk.com/t5/Getting-Data-In/webhook-unable-to-read-POST-data/m-p/360261#M95940 <P>Hello Splunk users,<BR /> I'm sorry for this trivial question, but I can't understand.</P> <P>How can I read the HTTP POST data from webhook alert action?</P> <P>I wrote this webhook script:</P> <PRE><CODE>&lt;?php file_put_contents('postalert', print_r($_POST, true)); ?&gt; </CODE></PRE> <P>But when it triggers, I only see an empty array as result:<BR /> <CODE><BR /> Array<BR /> (<BR /> )<BR /> </CODE><BR /> I'm sad. Where am I wrong?</P> <P>Thank you very much</P> <P>Warm Regards<BR /> Marco</P> Wed, 21 Jun 2017 13:25:37 GMT https://community.splunk.com/t5/Getting-Data-In/webhook-unable-to-read-POST-data/m-p/360261#M95940 sistemistiposta 2017-06-21T13:25:37Z https://community.splunk.com/t5/Getting-Data-In/webhook-unable-to-read-POST-data/m-p/360262#M95941 <P>I was having the same issue and was able to find the answer with the following StackOverflow article, excerpted here:</P> <P>The PHP superglobal $_POST is only is supposed to wrap data that is either</P> <UL> <LI>application/x-www-form-urlencoded (standard content type for simple form-posts) or</LI> <LI>multipart/form-data-encoded (mostly used for file uploads)</LI> </UL> <P>You need to fetch it yourself in <STRONG>RAW</STRONG> format with:<BR /> file_get_contents('php://input') </P> <P><A href="https://stackoverflow.com/questions/8893574/php-php-input-vs-post" target="_blank">https://stackoverflow.com/questions/8893574/php-php-input-vs-post</A></P> Wed, 30 Sep 2020 00:07:59 GMT https://community.splunk.com/t5/Getting-Data-In/webhook-unable-to-read-POST-data/m-p/360262#M95941 daxsmartpak 2020-09-30T00:07:59Z