Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to pass only the value object of the result key using webhook?

$
0
0
I am trying to use webhook to post the results of my search to a REST service. The REST service has 2 major criteria: 1. It only accepts JSON object 2. The JSON object passed should have 6 mandatory keys at the parent/top level My search returns all these 6 mandatory key/values. However, while converting to JSON, webhook passes the search result as a sub-JSON, for example: > {> "owner" : "some_owner",> "search_name" : "some_search",> "app" : "search",> "result" : { "mandatory_var1" : "value1", "mandatory_var2" : "value2", and so on}> } When I use `$result$` token to limit my search result, the output I get is: > { "result" : { "mandatory_var1" : "value1", "mandatory_var2" : "value2", and so on}} That is, the result I get is still a sub-json (a key-value pair with other keys removed), whereas, I require ***only*** the value of the result key to be passed, that is: > { "mandatory_var1" : "value1", "mandatory_var2" : "value2", and so on} Please help!

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>