# Payload total and output value do not match
**URL:** https://discuss.elastic.co/t/payload-total-and-output-value-do-not-match/195564
**Category:** Elasticsearch
**Tags:** elastic-stack-alerting
**Created:** [August 16, 2019, 9:19pm UTC](https://discuss.elastic.co/t/payload-total-and-output-value-do-not-match/195564 "2019-08-16T21:19:36Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Shaw](https://discuss.elastic.co/u/Shaw)
#### Post date: [August 16, 2019, 9:19pm UTC](https://discuss.elastic.co/t/payload-total-and-output-value-do-not-match/195564/1 "2019-08-16T21:19:36Z")
Hi,
When I setup a new Watcher, the payload total has like 38 records but the output result only gives 10, even refresh every time with different total the output stays 10, is it because the Simulation Results only give 10 max? Please advice.
_ **Partial Script** _
...
"condition": {
"compare": {
"ctx.payload.hits.total": {
"gte": 1
}
}
},
"actions": {
"send\_email": {
"transform": {
"script": {
"source": "def userhost= ctx.payload.hits.hits.stream().map(hit -\> 'User: ' + hit.\_source['user'] + ' - Hostname: ' + hit.\_source['hostname']).collect(Collectors.toList()); userhost.add(' Total: ' + userhost.length); return userhost;",
"lang": "painless"
...
_ **Simulated Result** _
...
"ctx.payload.hits.total": 38
}
}
},
"actions": [
{
"id": "send\_email",
"type": "email",
"status": "simulated",
"transform": {
"type": "script",
"status": "success",
"payload": {
"\_value": [
"User: xxx - Hostname: xxx",
...
" Total: 10"
]
---
### Author:  [@spinscale](https://discuss.elastic.co/u/spinscale)
#### Post date: [August 19, 2019, 7:21am UTC](https://discuss.elastic.co/t/payload-total-and-output-value-do-not-match/195564/2 "2019-08-19T07:21:48Z")
Hey,
by default elasticsearch only returns the first ten results. If you want to change this behaviour, you need to tweak the [size parameter](https://www.elastic.co/guide/en/elasticsearch/reference/7.3/search-request-body.html#request-body-search-from-size) of a search request.
--Alex
---
### Author:  [@Shaw](https://discuss.elastic.co/u/Shaw)
#### Post date: [August 19, 2019, 4:19pm UTC](https://discuss.elastic.co/t/payload-total-and-output-value-do-not-match/195564/3 "2019-08-19T16:19:05Z")
> [@spinscale](#):
>
> by default elasticsearch only returns the first ten results. If you want to change this behaviour, you need to tweak the [size parameter](https://www.elastic.co/guide/en/elasticsearch/reference/7.3/search-request-body.html#request-body-search-from-size) of a search request.
Thank you @spinscale. Your suggestion works!
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 16, 2019, 4:19pm UTC](https://discuss.elastic.co/t/payload-total-and-output-value-do-not-match/195564/4 "2019-09-16T16:19:28Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.