New Alert - BlinkOps Documentation

Triggers a workflow on every new alert. Endpoint: /v2/alerts

Workflows with this trigger check for new events every 5 minutes by default. You can adjust this interval in the Trigger settings.

Parameters

Parameter	Description
Triage Status	Select the triage status to filter results by.
Type	Select the alert type to filter results by.

Sample Event

{
	"action": "Block",
	"alertType": "BadBehavior",
	"assetCount": 1,
	"displayStatus": "Visible",
	"firstOccurredAt": "2024-03-07T11:52:41Z",
	"id": "a1b2c3d4-0000-0000-0000-000000000000",
	"kind": "MaliciousExecutable",
	"lastOccurredAt": "2024-03-07T11:52:41Z",
	"primaryProcess": {
		"artifact": {
			"filePath": "string",
			"kind": "Certificate",
			"sha256": "string"
		},
		"commandLine": "string",
		"kind": "DriverProcessResponse",
		"parentPid": "string",
		"pid": "string",
		"userId": "string",
		"username": "string"
	},
	"tenantId": "f97df110-f4de-492e-8849-4a6af68026b0",
	"totalOccurrences": 1,
	"triageStatus": "New"
}

⌘I