Skip to main content
Triggers a workflow on every new event matching a given query.
Workflows based on this trigger will search for new events every 5 minutes.

​
Basic Parameters

ParameterDescription
DescriptionThe description of the event.
Event TypesThe event types.
ScopesThe scopes for the request.

​
Advanced Parameters

ParameterDescription
Confidence IndicatorThe confidence indicator of the event.
Event StatesThe event states.
SeveritiesThe event severities.

​
Sample Event

{
  "eventId": "b6dzd2das24423213ffa3849ccf68f52",
  "customerId": "myCompany",
  "saas": "office365_emails",
  "entityId": "321ee437asa6043d93c55e92h2f3z6c",
  "state": "new",
  "type": "phishing",
  "confidenceIndicator": "malicious",
  "eventCreated": "2024-05-07T00:54:23.671820+00:00",
  "severity": "4",
  "description": "Phishing attempt detected in an email from joeSmith@gmail.com",
  "data": "#{"entityId": "321ee437asa6043d93c55e92h2f3z6c"}",
  "additionalData": null,
  "availableEventActions": null,
  "actions": [],
  "senderAddress": "jonDoe@gmail.com",
  "entityLink": "https://portal.checkpoint.com/dashboard/email&collaboration/CG34?route=cHJvZFDSF3samZasdAEDF12DSAdsahaWxzX2VtYWlADA21ASDGMJNBdlMDk0ZmE2MDRjYmQ5M2M1NWU5YzkyMDZj"
}
⌘I