Hello,
I would like to pass one of the columns/fields from one of my Splunk search results as an input to a lambda function using "Add to SNS alert" action option.
The value I am trying to pass is a url, which I have saved under field "url" and in the action options, am entering the AWS account name, topic name but am unable to understand how/what exactly should I pass in the message field. Currently, this is what I have set the message field to $result.url$, but its not working. Please can someone help me with this.