New Alert - BlinkOps Documentation

Triggers a workflow on every new alert. Note: This action is supported only by the Service Account connection method. Endpoint: https://alertcenter.googleapis.com/v1beta1/alerts

Workflows with this trigger check for new events every 5 minutes by default. You can adjust this interval in the Trigger settings.

Basic Parameters

Parameter	Description
Alert Source	The source of the alert.
Customer ID	The unique ID for the customer’s Google Workspace account. The customer ID can be obtained by the `List Users` action. Note: The customer ID must have the initial ‘C’ stripped. For example: `046psxkn`.
Type	The type of the alert.

Advanced Parameters

Parameter	Description
Delegated User Override	Perform the action on behalf of another user, overriding the delegated user defined in the connection. If not specified, the delegated user is the one provided in the connection. Has no effect when using an OAuth connection. NOTE: the connection details are not edited by this input.

Sample Event

{
	"alerts": [
		{
			"customerId": "00m234mn",
			"alertId": "abcdefg-1111-2222-333-444",
			"createTime": "2022-12-21T07:43:17.604338Z",
			"startTime": "2022-12-21T07:13:16Z",
			"endTime": "2022-12-21T07:13:16Z",
			"type": "Suspicious login",
			"source": "Google identity",
			"data": {
				"@type": "type.googleapis.com/google.apps.alertcenter.type.AccountWarning",
				"email": "johndoe@example.com",
				"loginDetails": {
					"ipAddress": "00.00.00.000"
				}
			},
			"securityInvestigationToolLink": "admin.google.com/ac/ac/investigate?alert=0000asdasdasd0000asdasd",
			"metadata": {
				"customerId": "00m3zpd1",
				"alertId": "bd70c094-7e40-478a-9d6b-70b4a4d1b3a1",
				"status": "NOT_STARTED",
				"updateTime": "2022-12-21T07:43:17.604338Z",
				"severity": "LOW",
				"etag": "h5hdL3n1SQg="
			},
			"updateTime": "2022-12-21T07:43:17.604338Z",
			"etag": "h5hdL3n1SQg="
		}
	]
}