Putting it in debug has revealed the problem is with my URL not being https 2020-10-09 14:15:42,290 WARNING pid=85256 tid=MainThread file=cim_actions.py:message:243 | sendmodaction - signature="the potential action URL configured does not target an https site, which is required for compliance purpose, the potential action has been disabled automatically." Because our splunk is internal only, it's only running http. I've tried unchecking the "SSL Certificate Validation" option in the configuration, but it seems that this is relates only to the webhook.  Any chance there is an option or file change I can make to allow actions to plain http? Thank you. ... View more

Thank you @guilmxm  for your very fast response.  Your multi-value field suggestion, adding the join, stopped the "E" and "P" appearing on the card. 👍 However changing the "OpenURL Potential Action URL" to a static address, still does not show an action button.   Actually I can add the $results_link$ tag to the title and it correctly expands to a valid URL. It must be for some other reason that the button does not show.  I can POST the following to the webhook and the open url button works correctly.    "potentialAction": [{ "@type": "ActionCard", "name": "View Results in Splunk", "actions": [{ "@type": "OpenUri", "name": "View in Splunk", "targets": [ { "os": "default", "uri":"http://splunk-test" } ................   If I don't supply the "os": "default" it does not work. I cannot see the body the add-on is sending as my locked down environment does not allow me to send it to another webhook like "webhook.site". Do you have any other ideas?  Thank you.    ... View more