Skip to main content
Triggers a workflow on every new alert. Note: This action is supported only by the Service Account connection method. Endpoint: https://alertcenter.googleapis.com/v1beta1/alerts
Workflows with this trigger check for new events every 5 minutes by default. You can adjust this interval in the Trigger settings.

​
Basic Parameters

ParameterDescription
Alert SourceThe source of the alert.
Customer IDThe unique ID for the customer’s Google Workspace account. The customer ID can be obtained by the List Users action.

Note: The customer ID must have the initial ‘C’ stripped. For example: 046psxkn.
TypeThe type of the alert.

​
Advanced Parameters

ParameterDescription
Delegated User OverridePerform the action on behalf of another user, overriding the delegated user defined in the connection.

If not specified, the delegated user is the one provided in the connection.

Has no effect when using an OAuth connection.

NOTE: the connection details are not edited by this input.

​
Sample Event

{
	"alerts": [
		{
			"customerId": "00m234mn",
			"alertId": "abcdefg-1111-2222-333-444",
			"createTime": "2022-12-21T07:43:17.604338Z",
			"startTime": "2022-12-21T07:13:16Z",
			"endTime": "2022-12-21T07:13:16Z",
			"type": "Suspicious login",
			"source": "Google identity",
			"data": {
				"@type": "type.googleapis.com/google.apps.alertcenter.type.AccountWarning",
				"email": "johndoe@example.com",
				"loginDetails": {
					"ipAddress": "00.00.00.000"
				}
			},
			"securityInvestigationToolLink": "admin.google.com/ac/ac/investigate?alert=0000asdasdasd0000asdasd",
			"metadata": {
				"customerId": "00m3zpd1",
				"alertId": "bd70c094-7e40-478a-9d6b-70b4a4d1b3a1",
				"status": "NOT_STARTED",
				"updateTime": "2022-12-21T07:43:17.604338Z",
				"severity": "LOW",
				"etag": "h5hdL3n1SQg="
			},
			"updateTime": "2022-12-21T07:43:17.604338Z",
			"etag": "h5hdL3n1SQg="
		}
	]
}