That action isn’t written as an AR. You are better off writing your own webhook alert action for your purpose using Splunk Add on builder as an AR. https://docs.splunk.com/Documentation/AddonBuilder/2.2.0/UserGuide/Overview ... View more