Hey everyone!

I am trying to create an alert using a webhook. This is the json sample I used for my webhook:

{
  "name": "Alert test",
  "environment": "EnviName",
  "rule_generator": "Test rule",
  "alert_identifier": "Alert-Test-1",
  "priority": 10,
  "display_id": "[Case.Id]",
  "start_time": "2025-08-14T14:00:00Z",
  "end_time": "2025-08-14T14:00:00Z",
  "device_product": "RULE",
  "events": [
    { "name": "Event_No_Name1", "type": "Event_No_Type1", "severity": 1, "source": "Origin", "device_product": "RULE" },
    { "name": "Event_No_Name2", "type": "Event_No_Type2", "severity": 1, "source": "Origin", "device_product": "RULE" }
  ],
  "custom_fields": {
    "detected_from": "Perseus",
    "source_case": "[Case.Id]",
    "playbook_origin": "Create Cortex Alert",
    "extracted_domains": "[Entity.Identifier]"
  }
}

In the Data Mapping, for EventName I wrote in the Expression builder "events.name". As you can see here:

However, what this does is giving me as a result a list of all the events’ names, like this:

As a result, when I use the webhook to create an alert, its events look like something like this:

Instead of that, I would like to have the first event with the name “Event_No_Name1” and the second event with the name  “Event_No_Name2”.

How should I change the webhook in order to get that?

Any help will be apreciated