Workflow to get list of sources and their last aggregation date to send email remainder to aggregate source

To use the HTTP action, follow the below steps:

{
    "query": {
        "query": "type:source_management AND name:\"Aggregate Source Account Passed\" AND target.name:\"source name\" AND created:<now-1w"
    },
    "indices": [
        "events"
    ],
    "includeNested": false,
    "sort": [
        "-created"
    ]
}

Note: Replace sailpointtenant with your tenant name in the URLs and in the json body replace source name with your source name or customize the query as needed
HTTP - Reference screenshot 1

HTTP - Reference screenshot 2

In the workflow, i am comparing the response count as shown below, so if the count is 0 then send email, if count is greater than 0 then do nothing

To know more on how to use HTTP action, refer: Using Workflow's HTTP Request Action to Work With IdentityNow APIs

I hope this helps.

1 Like