Is there a J1 alert we could configure that could fire if/when an integration fails?

AaronO
AaronO ✭✭✭
in Security Operations
Especially when an integration fails several times in a row.

Answers

  • mikiodehart_
    mikiodehart_ ✭
    Yes, great question!

    FIND jupiterone_integration with ((status='IN_PROGRESS' and _beginOn < date.now - 2 day) OR status = 'FAILED') AND pollingInterval!='DISABLED' as i RETURN count(i), i.integrationType

This Month's Leaders

Categories