Retrieve a list of alerts. Note: This action is supported only by the Service Account connection method.
External DocumentationTo learn more, visit the Google Admin Console documentation.

Basic Parameters

ParameterDescription
Customer IDThe unique ID for the customer’s Google Workspace account. The customer ID can be obtained by the List Users action.

Note: The customer ID must have the initial ‘C’ stripped. For example: 046psxkn.
FilterA query for filtering alert results.

For more information on building the filter query, please visit Google’s docs on query filters and supported query filter fields.

Advanced Parameters

ParameterDescription
Delegated User OverridePerform the action on behalf of another user, overriding the delegated user defined in the connection.

If not specified, the delegated user is the one provided in the connection.

Has no effect when using an OAuth connection.

NOTE: the connection details are not edited by this input.
Page SizeThe maximum number of results to retrieve in a single execution.
Page TokenA page token, received from a previous List Alerts execution. Provide this to retrieve the subsequent page. When paginating, all other parameters provided must match the execution that provided the page token.

Example Output

{
  "alerts": [
    {
      {
        "customerId": "0000-000-000-00000",
        "alertId": "0000-000-000-00000",
        "createTime": "9999-12-31T23:59:59Z",
        "startTime": "9999-12-31T23:59:59Z",
        "endTime": "9999-12-31T23:59:59Z",
        "type": "Customer takeout initiated",
        "source": "Domain wide takeout",
        "data": {
          "email": "example",
          "events": [
            {
              "deviceId": "example",
              "serialNumber": "example",
              "deviceType": "example",
              "deviceModel": "example",
              "resourceId": "example",
              "iosVendorId": "example",
              "deviceCompromisedState": "example"
            }
          ]
        },
        "securityInvestigationToolLink": "security",
        "deleted": true,
        "metadata": {
          {
            "customerId": "0000-000-000-00000",
            "alertId": "0000-000-000-00000",
            "status": "CLOSED",
            "assignee": "email@example.com",
            "updateTime": "9999-12-31T23:59:59Z",
            "severity": "HIGH",
            "etag": "tag"
          }
        },
        "updateTime": "9999-12-31T23:59:59Z",
        "etag": "tag"
      }
    }
  ],
  "nextPageToken": ""
}

Workflow Library Example

List Alerts with Google Admin Console and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop