# Aggregation Failure Report Alert

**URL:** <https://developer.sailpoint.com/discuss/t/aggregation-failure-report-alert/14069>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud, aggregation\
**Created:** [July 10, 2023, 9:47am UTC](https://developer.sailpoint.com/discuss/t/aggregation-failure-report-alert/14069 "2023-07-10T09:47:31Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mane](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/mane/32/6777_2.png) [@Mane](https://developer.sailpoint.com/discuss/u/Mane)\
**Post date:** [July 10, 2023, 9:47am UTC](https://developer.sailpoint.com/discuss/t/aggregation-failure-report-alert/14069/1 "2023-07-10T09:47:31Z")

</div>

Hello Team,

Is it possible to send any notification or alert to any team if there is a failure in aggregation for any source in IdentityNow? Could anyone please suggest? I thought of using workflow, but I was not able to see any appropriate triggers.

Thank you & Kind regards

Mane

---

<div class="post-metadata">

**Author:** ![sharvari](https://avatars.discourse-cdn.com/v4/letter/s/3be4f8/32.png) [@sharvari](https://developer.sailpoint.com/discuss/u/sharvari)\
**Post date:** [July 10, 2023, 10:41am UTC](https://developer.sailpoint.com/discuss/t/aggregation-failure-report-alert/14069/2 "2023-07-10T10:41:51Z")

</div>

You can achieve this easily using the Workflows. “Account Aggregation Completed” will be your trigger. You can call the Send Email action if the trigger status is failed.

---

<div class="post-metadata">

**Author:** ![Mane](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/mane/32/6777_2.png) [@Mane](https://developer.sailpoint.com/discuss/u/Mane)\
**Post date:** [July 10, 2023, 1:51pm UTC](https://developer.sailpoint.com/discuss/t/aggregation-failure-report-alert/14069/3 "2023-07-10T13:51:13Z")

</div>

Thank you @sharvari for your response. I’m trying to create a workflow but could you please let me know, how can we set trigger status as failed.

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/0/0c65138f1aa9d2e16a46c5f9fbf0fd1182e96af7.png)

Thank you and Kind regards  
Mane

---

<div class="post-metadata">

**Author:** ![sushantkulkarni](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sushantkulkarni/32/35213_2.png) [@sushantkulkarni](https://developer.sailpoint.com/discuss/u/sushantkulkarni)\
**Post date:** [July 10, 2023, 2:14pm UTC](https://developer.sailpoint.com/discuss/t/aggregation-failure-report-alert/14069/4 "2023-07-10T14:14:54Z")

</div>

@Mane Another way if you want to explore is creating a report of all the failed aggregations. The report can be subscribed to at whatever frequency the team to be alerted needs, and that will have the details of the failed aggregation as well.

---

<div class="post-metadata">

**Author:** ![sharvari](https://avatars.discourse-cdn.com/v4/letter/s/3be4f8/32.png) [@sharvari](https://developer.sailpoint.com/discuss/u/sharvari)\
**Post date:** [July 10, 2023, 2:25pm UTC](https://developer.sailpoint.com/discuss/t/aggregation-failure-report-alert/14069/5 "2023-07-10T14:25:43Z")

</div>

Please refer to this article

> [@Account Aggregation Failure Notification](https://developer.sailpoint.com/discuss/t/account-aggregation-failure-notification/14078):
>
> The built in system notifications can send email notifications if a source is not reachable but there’s no option available to notify an Administrator about Aggregation Failures. This can be achieved using [Workflows](https://documentation.sailpoint.com/saas/help/workflows/workflow-basics.html)! Please see attached JSON script for this workflow. [AccountAggregationFailedNotification.json](https://developer.sailpoint.com/discuss/uploads/short-url/wcH4Z02VGgerJN0voQaR37bNwfG.json) (1.8 KB)

---

<div class="post-metadata">

**Author:** ![Mane](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/mane/32/6777_2.png) [@Mane](https://developer.sailpoint.com/discuss/u/Mane)\
**Post date:** [July 10, 2023, 3:13pm UTC](https://developer.sailpoint.com/discuss/t/aggregation-failure-report-alert/14069/6 "2023-07-10T15:13:26Z")

</div>

Thanks a lot @sushantkulkarni

Regards  
Mane

---

<div class="post-metadata">

**Author:** ![Mane](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/mane/32/6777_2.png) [@Mane](https://developer.sailpoint.com/discuss/u/Mane)\
**Post date:** [July 10, 2023, 3:14pm UTC](https://developer.sailpoint.com/discuss/t/aggregation-failure-report-alert/14069/7 "2023-07-10T15:14:01Z")

</div>

Thank you very much @sharvari

Regards  
Mane

---

<div class="post-metadata">

**Author:** ![Mane](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/mane/32/6777_2.png) [@Mane](https://developer.sailpoint.com/discuss/u/Mane)\
**Post date:** [July 12, 2023, 11:17am UTC](https://developer.sailpoint.com/discuss/t/aggregation-failure-report-alert/14069/8 "2023-07-12T11:17:59Z")

</div>

Hello @sharvari, thanks a lot for your response, after enabling the workflow and tested, it’s been triggering for both Success and failure of aggregations’. is it because the trigger itself is ‘Aggregation completed’. I’m checking with some filters also but no luck so far. Could  
[Aggregation Testing.json](https://developer.sailpoint.com/discuss/uploads/short-url/jIC1pr77txomzV4jICyqKOtWQl4.json) (1.5 KB)  
you please suggest?

Thank you and kind regards  
Mane

---

<div class="post-metadata">

**Author:** ![sharvari](https://avatars.discourse-cdn.com/v4/letter/s/3be4f8/32.png) [@sharvari](https://developer.sailpoint.com/discuss/u/sharvari)\
**Post date:** [July 12, 2023, 12:32pm UTC](https://developer.sailpoint.com/discuss/t/aggregation-failure-report-alert/14069/9 "2023-07-12T12:32:35Z")

</div>

The issue is with your Compare Strings action, you have configured it as

> $.trigger.status = $.trigger.errors

This will never be true. Trigger status is a string and will have values like ‘Success’, ‘Failed’ etc.  
errors is an array and whenever aggregation fails it will hold the error info.

Please modify your step to $.trigger.status = Failed to make sure it triggers on Failures only.

---

<div class="post-metadata">

**Author:** ![Mane](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/mane/32/6777_2.png) [@Mane](https://developer.sailpoint.com/discuss/u/Mane)\
**Post date:** [July 17, 2023, 12:21pm UTC](https://developer.sailpoint.com/discuss/t/aggregation-failure-report-alert/14069/10 "2023-07-17T12:21:45Z")

</div>

Hi @sharvari ,

Thanks a lot . only place where we have to update json code is : in the place of ($.tirgger.status) update it , $.tirgger.status=Error. We can also get source name if we want to let the team know on which source it is failing. i.e in the body of the email template we have to use {{$.trigger.source.name}}.

Thanks & Regards  
Mane

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [September 15, 2023, 12:22pm UTC](https://developer.sailpoint.com/discuss/t/aggregation-failure-report-alert/14069/11 "2023-09-15T12:22:02Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
