I've tried triggering 'Once' and 'For each result', and in both cases I see only one result in the POST body send via the webhook. I've included an example below. I was hoping for either all results, so that I could count them, or better yet a count of results. Is this possible? Example result { "app": "search", "owner": "emailaddress@adomain.com", "search_name": "Alert Name", "results_link": "http://a.pointless.url/that/doesn%27t/work", "sid": "scheduler_ZGF2aWQuZ2FyZEBsYW5kbWFyay5jby51aw__search__RMD5decc55088fa60070_at_1535711100_37050", "result": { "splunk_server_group": "", "_eventtype_color": "", "_cd": "4:960", "_serial": "0", "_sourcetype": "httpevent", "_bkt": "my-index-name~4~98B5C0B4-EAAF-4B7C-9775-56A8E159035D", "_time": "1535710877", "splunk_server": "splunk.adomain.com", "_kv": "1", "_indextime": "1535710877", "source": "my-index-name", "eventtype": "", "_raw": "This is a test, everything is really fine.", "host": "splunk.adomain.com", "index": "my-index-name", "_si": [ "splunk.adomain.com", "my-index-name" ], "punct": "__-_", "sourcetype": "httpevent", "linecount": "1" } } My alert Enabled: Yes App: search Permissions: Shared in App Alert Type: Scheduled (Cron Schedule) Trigger Condition: Number of Results is > 0 Actions: 2 Actions Add to Triggered Alerts Webhook ... View more