List the alerts. You can create a custom rule that will trigger an alert on a specific event in the Rules page using the Create rule button.

​
Basic Parameters

ParameterDescription
Customer IDThe unique identifier of the Google Workspace organization account of the customer the alerts are associated with.
You can find the customer ID in the Account Settings page.
Page TokenA token identifying a page of results the server should return.

​
Advanced Parameters

ParameterDescription
Delegated User OverridePerform the action on behalf of another user, overriding the delegated user defined in the connection.

If not specified, the delegated user is the one provided in the connection.

Has no effect when using an OAuth connection.

NOTE: the connection details are not edited by this input.
FilterA query string for filtering alert results.
Order ByThe sort order of the list results. If not specified results may be returned in arbitrary order.
You can sort the results in descending order based on the creation timestamp using orderBy=“createTime desc”.
Currently, supported sorting are createTime asc, createTime desc, updateTime desc.
Page SizeThe requested page size. Server may return fewer items than requested. If unspecified, server picks an appropriate default.

​
Example Output

{
  "alerts": [
    {
      {
        "customerId": "0000-000-000-00000",
        "alertId": "0000-000-000-00000",
        "createTime": "9999-12-31T23:59:59Z",
        "startTime": "9999-12-31T23:59:59Z",
        "endTime": "9999-12-31T23:59:59Z",
        "type": "Customer takeout initiated",
        "source": "Domain wide takeout",
        "data": {
          "email": "example",
          "events": [
            {
              "deviceId": "example",
              "serialNumber": "example",
              "deviceType": "example",
              "deviceModel": "example",
              "resourceId": "example",
              "iosVendorId": "example",
              "deviceCompromisedState": "example"
            }
          ]
        },
        "securityInvestigationToolLink": "security",
        "deleted": true,
        "metadata": {
          {
            "customerId": "0000-000-000-00000",
            "alertId": "0000-000-000-00000",
            "status": "CLOSED",
            "assignee": "email@example.com",
            "updateTime": "9999-12-31T23:59:59Z",
            "severity": "HIGH",
            "etag": "tag"
          }
        },
        "updateTime": "9999-12-31T23:59:59Z",
        "etag": "tag"
      }
    }
  ],
  "nextPageToken": ""
}

​
Workflow Library Example

List Alerts with Google Workspace and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop