New Alert

Triggers a workflow on every new alert.

info

Automations based on this trigger will search for new events every 5 minutes.

Basic Parameters

Parameter	Description
Alert Source	The source of the alert.
Customer ID	The unique identifier of the Google Workspace organization account of the customer the alerts are associated with. You can find the customer ID in the Account Settings page.
Type	The type of the alert.

Advanced Parameters

Parameter	Description
Delegated User Override	Perform the action on behalf of another user, overriding the delegated user defined in the connection. If not specified, the delegated user is the one provided in the connection. Has no effect when using an OAuth connection. NOTE: the connection details are not edited by this input.

Sample Event

{
    "alerts": [
        {
            "customerId": "00m234mn",
            "alertId": "abcdefg-1111-2222-333-444",
            "createTime": "2022-12-21T07:43:17.604338Z",
            "startTime": "2022-12-21T07:13:16Z",
            "endTime": "2022-12-21T07:13:16Z",
            "type": "Suspicious login",
            "source": "Google identity",
            "data": {
                "@type": "type.googleapis.com/google.apps.alertcenter.type.AccountWarning",
                "email": "johndoe@example.com",
                "loginDetails": {
                    "ipAddress": "00.00.00.000"
                }
            },
            "securityInvestigationToolLink": "admin.google.com/ac/ac/investigate?alert=0000asdasdasd0000asdasd",
            "metadata": {
                "customerId": "00m3zpd1",
                "alertId": "bd70c094-7e40-478a-9d6b-70b4a4d1b3a1",
                "status": "NOT_STARTED",
                "updateTime": "2022-12-21T07:43:17.604338Z",
                "severity": "LOW",
                "etag": "h5hdL3n1SQg="
            },
            "updateTime": "2022-12-21T07:43:17.604338Z",
            "etag": "h5hdL3n1SQg="
        }
    ]
}