Dashboards & Visualizations

How do I send just the value of token $job.resultCount$ to a webhook?

damonmanni
Path Finder

We have a simple alert with a Webook action assigned to it with an endpoint is OMI.

Search: index=xyz TCP_ERROR appName="jojothedolphin"
Alert: If number of results > 10

After the alert is triggered, field and values I want to send as my payload are stored in tokens:
$trigger_date$
$trigger_time$
$alert.severity$
$job.resultCount$

But I am pulling my hair out trying to figure out how to access them and their value. I cannot get them to display in a table (or any other way which would then become my payload. Help!
Damon

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!