I have a very similar question: is there a way to rerun alert until it gets the result of more than 0?  ... View more

If the alert return a result 0 then i need to rerun the alert. Can anybody tell me how to do it ? ... View more

@cbhattad Take a look at my post here. https://answers.splunk.com/answers/793588/is-it-possible-to-assign-a-token-value-to-a-user-o.html While it doesn't directly answer your question, you should be able to use the same logic to assign a token value of "false" or "true" to the <option name="link.visible">$tok_Vis$</option> to obtain your required result. Note, however, that even though search, and therefore the SPL that runs it, is not available, a savy user could right-click and view page source on the webpage. They could then filter through the source and pick out your search code. Hope this helps. Thanks and God bless, Genesius ... View more