No Raw Event Data for Webhook Ingested event

[grace01]

I am trying to ingest alerts from Akamai via webhook. There is alert data, but there is no event data that comes through on the alert, and when I look in the ontology to view the "raw event data", there isn't any. Has anyone else encountered this issue with webhooks and know how to resolve?

[josemarin · Accepted solution]

To get the event data, you need to map your events in the webhook sample. The field is EventList under advanced.

It has to be mapped to a list-array type:

{"EventList":
    [
        {"eventName":"Event1", "eventField1":"value1", "eventField2":"value2"},
        {"eventName":"Event1", "eventField1":"value1", "eventField2":"value2"},
    ],
}

[grace01]

Thanks, that was the issue!

[SoarAndy]

Tiny addition for future readers - IIRC you MUST point to an array, not a JSON