Dashboards & Visualizations

How do I send just the value of token $job.resultCount$ to a webhook?

Path Finder

We have a simple alert with a Webook action assigned to it with an endpoint is OMI.

Search: index=xyz TCP_ERROR appName="jojothedolphin"
Alert: If number of results > 10

After the alert is triggered, field and values I want to send as my payload are stored in tokens:

But I am pulling my hair out trying to figure out how to access them and their value. I cannot get them to display in a table (or any other way which would then become my payload. Help!

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!