https://community.splunk.com/t5/Alerting/Using-tokens-in-alert-messages-array-fields/m-p/523509#M9803 <P><SPAN>In my search result, I have&nbsp;some arrays fields like this:<BR /></SPAN><SPAN>&nbsp; &nbsp; data.protoPayload.request.spec.containers{}.image</SPAN></P><P><SPAN>`containers` field is an array which is a list of multiple dictionaries.</SPAN></P><P>How can I include this into my alert messages? I've tried $result.<SPAN>data.protoPayload.request.spec.containers{}.image$ but this would not be rendered to a value.</SPAN></P><P>Thanks in advance,</P> Wed, 07 Oct 2020 18:49:03 GMT jaskar 2020-10-07T18:49:03Z https://community.splunk.com/t5/Alerting/Using-tokens-in-alert-messages-array-fields/m-p/523509#M9803 <P><SPAN>In my search result, I have&nbsp;some arrays fields like this:<BR /></SPAN><SPAN>&nbsp; &nbsp; data.protoPayload.request.spec.containers{}.image</SPAN></P><P><SPAN>`containers` field is an array which is a list of multiple dictionaries.</SPAN></P><P>How can I include this into my alert messages? I've tried $result.<SPAN>data.protoPayload.request.spec.containers{}.image$ but this would not be rendered to a value.</SPAN></P><P>Thanks in advance,</P> Wed, 07 Oct 2020 18:49:03 GMT https://community.splunk.com/t5/Alerting/Using-tokens-in-alert-messages-array-fields/m-p/523509#M9803 jaskar 2020-10-07T18:49:03Z