Triggers a workflow on every new alert.
Workflows based on this trigger will search for new events every 5 minutes.

​
Basic Parameters

ParameterDescription
Alert SourceThe source of the alert.
Customer IDThe unique ID for the customer’s Google Workspace account. The customer ID can be obtained by the List Users action.

Note: The customer ID must have the initial ‘C’ stripped. For example: 046psxkn.
TypeThe type of the alert.

​
Advanced Parameters

ParameterDescription
Delegated User OverridePerform the action on behalf of another user, overriding the delegated user defined in the connection.

If not specified, the delegated user is the one provided in the connection.

Has no effect when using an OAuth connection.

NOTE: the connection details are not edited by this input.

​
Sample Event

{
	"alerts": [
		{
			"customerId": "00m234mn",
			"alertId": "abcdefg-1111-2222-333-444",
			"createTime": "2022-12-21T07:43:17.604338Z",
			"startTime": "2022-12-21T07:13:16Z",
			"endTime": "2022-12-21T07:13:16Z",
			"type": "Suspicious login",
			"source": "Google identity",
			"data": {
				"@type": "type.googleapis.com/google.apps.alertcenter.type.AccountWarning",
				"email": "johndoe@example.com",
				"loginDetails": {
					"ipAddress": "00.00.00.000"
				}
			},
			"securityInvestigationToolLink": "admin.google.com/ac/ac/investigate?alert=0000asdasdasd0000asdasd",
			"metadata": {
				"customerId": "00m3zpd1",
				"alertId": "bd70c094-7e40-478a-9d6b-70b4a4d1b3a1",
				"status": "NOT_STARTED",
				"updateTime": "2022-12-21T07:43:17.604338Z",
				"severity": "LOW",
				"etag": "h5hdL3n1SQg="
			},
			"updateTime": "2022-12-21T07:43:17.604338Z",
			"etag": "h5hdL3n1SQg="
		}
	]
}