When I send the splunk search result data via webhook I am only getting only the first row, any alternative?

[deepakgarg1373]

When I send the splunk search result data via webhook I am only getting only the  first row. Is there any alternative to this?

[marysan]

Hi

in Edit Alert ->"Trigger Conditions" -> Trigger

you must select "Once" option instead of "For each result"

[deepakgarg1373]

sure let me try

[ITWhisperer]

Could you use the result_link token to call back using the ReST interface to retrieve the results?