The built in system notifications can send email notifications if a source is not reachable but there’s no option available to notify an Administrator about Aggregation Failures.
This can be achieved using Workflows!
Please see attached JSON script for this workflow.
Where do I access workflow?
We took this a step further and had the event send a message to a ServiceNow scripted REST endpoint and will create an incident
Oh, was looking for it in identitynow. Looks like it is a separate module… We probably don’t have it.
@sharvari @colin_mckibben Is there a way we could have this notification for all the failed sources, rather than one source in the email notification?
Yes, in that case you can just remove the Compare Strings action from this workflow and then it will send an email notification for each failed account aggregation.
@sharvari but i want this as a consolidated report for each day and not as single emails everytime the account aggregation fails. and also if we remove the compare strings, then the email will get triggered for all status - SUCCESS or ERROR right?
I want this to be a scheduled workflow which triggers at a particular time and gives us consolidated report status of sources in mail…
Could you help me with any insights on this please?
This workflow won’t work for your use case.
You can use the built in Saved Search query subscriptions for sending the consolidated report based on event activity.
Thanks for sharing this! I tried implementing this into my tenant and I adjusted the trigger filter to the appropriate source but I haven’t been able to get this to work yet. Is anyone else having trouble?
