Unwanted backslash in alert webhook

%3CLINGO-SUB%20id%3D%22lingo-sub-1608903%22%20slang%3D%22en-US%22%3ERe%3A%20Unwanted%20backslash%20in%20alert%20webhook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1608903%22%20slang%3D%22en-US%22%3EFollowing%2C%20I%20have%20same%20issue%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-127156%22%20slang%3D%22en-US%22%3EUnwanted%20backslash%20in%20alert%20webhook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-127156%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20there%2C%20I%20have%20a%20problem%20about%20alert%20webhook%20integration%20with%20slack.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMy%20query%20of%20alert%20is%20the%20following%3C%2FP%3E%0A%3CP%3E%60%60%60%3C%2FP%3E%0A%3CP%3EAzureActivity%20%7C%20where%20OperationName%20%3D%3D%20%22Update%20resource%20group%22%20and%20ActivityStatus%20%3D%3D%20%22Succeeded%22%3C%2FP%3E%0A%3CP%3E%60%60%60%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAnd%20my%20JSON%20payload%20of%20webhook%20is%20here%3C%2FP%3E%0A%3CP%3E%60%60%60%3C%2FP%3E%0A%3CP%3E%7B%22text%22%3A%22%23A%20new%20resource%20group%20has%20been%20created.%20You%20can%20find%20the%20detail%20from%20%26lt%3B%23linktosearchresults%7COMS%20Search%20Results%26gt%3B%22%7D%3C%2FP%3E%0A%3CP%3E%60%60%60%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThen%20I%20got%20a%20webhook%20on%20my%20slack%20client%20and%20click%20the%20link%20defined%20%22%3CSPAN%3E%23linktosearchresults%22%20to%20confirm%20the%20alert.%20But%20the%20query%20failed%20because%20there%20were%20some%20unwanted%20escape%20backslash%20in%20the%20query%20generated%20the%20link.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%60%60%60%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EAzureActivity%20%7C%20where%20OperationName%20%3D%3D%20%5C%22Update%20resource%20group%5C%22%20and%20ActivityStatus%20%3D%3D%20%5C%22Succeeded%5C%22%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%60%60%60%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EDoes%20anyone%20know%20the%20cause%20and%20the%20workaround%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-127156%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAlerts%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ELog%20Analytics%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1625334%22%20slang%3D%22en-US%22%3ERe%3A%20Unwanted%20backslash%20in%20alert%20webhook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1625334%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F769473%22%20target%3D%22_blank%22%3E%40MilesAdamson%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3EWe%20were%20not%20able%20to%20reproduce%20this%20issue.%3C%2FP%3E%0A%3CP%3ECan%20you%20please%20open%20a%20support%20ticket%20for%20us%20to%20investigate%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Microsoft

Hi there, I have a problem about alert webhook integration with slack.

 

My query of alert is the following

```

AzureActivity | where OperationName == "Update resource group" and ActivityStatus == "Succeeded"

```

 

And my JSON payload of webhook is here

```

{"text":"#A new resource group has been created. You can find the detail from <#linktosearchresults|OMS Search Results>"}

```

 

Then I got a webhook on my slack client and click the link defined "#linktosearchresults" to confirm the alert. But the query failed because there were some unwanted escape backslash in the query generated the link.

```

AzureActivity | where OperationName == \"Update resource group\" and ActivityStatus == \"Succeeded\"

```

 

Does anyone know the cause and the workaround?

2 Replies
Following, I have same issue

Hi@MilesAdamson,

We were not able to reproduce this issue.

Can you please open a support ticket for us to investigate?