{"Abuse":[{"display_name":"Abuse Report Alert","type":"abuse_report_alert","description":"Get alerts for abuse reports submitted against the Cloudflare Account","filter_options":[{"Key":"type","ComparisonOperator":"==","Range":"0-n","AvailableValues":null}]}],"Access":[{"display_name":"Expiring Service Token Alert","type":"expiring_service_token_alert","description":"Cloudflare Access service token expiration notice, sent 7 days before token is set to expire","filter_options":[]}],"Billing":[{"display_name":"Billing Budget Alert","type":"billing_budget_alert","description":"Notifies when your usage charges reach your configured budget threshold for the billing period.","filter_options":[{"Key":"total_spend_dollars","ComparisonOperator":">=","Range":"1-1","AvailableValues":null}]},{"display_name":"Billing Usage Alert","type":"billing_usage_alert","description":"Billing usage exceeds your configured threshold for a specific product","filter_options":[{"Key":"product","ComparisonOperator":"==","Range":"1-n","AvailableValues":null},{"Key":"limit","ComparisonOperator":">=","Range":"1-n","AvailableValues":null}]}],"Bot Management":[{"display_name":"Bot Detection Alert","type":"bot_traffic_basic_alert","description":"Receive alerts when traffic patterns toward a domain may indicate a bot attack.","filter_options":[]},{"display_name":"Custom Bot Detection Alert","type":"custom_bot_detection_alert","description":"Receive alerts when traffic patterns toward a domain match filters of your choosing and indicate a possible bot attack.","filter_options":[]}],"Brand Protection":[{"display_name":"Brand Protection Domain Match Digest","type":"brand_protection_digest","description":"Get regular digest of all domains matching your saved queries","filter_options":[{"Key":"query_tag","ComparisonOperator":"==","Range":"0-n","AvailableValues":null}]},{"display_name":"Logo Match Alert","type":"logo_match_alert","description":"Get alerts when saved logos match images from URLs scanned by Security Center","filter_options":[{"Key":"logo_tag","ComparisonOperator":"==","Range":"0-n","AvailableValues":null}]},{"display_name":"Brand Protection Domain Match Alert","type":"brand_protection_alert","description":"Get alerts when saved queries match a new domain","filter_options":[{"Key":"query_tag","ComparisonOperator":"==","Range":"0-n","AvailableValues":null}]}],"CASB":[{"display_name":"CASB Weekly Digest","type":"casb_weekly_digest","description":"A weekly digest of CASB events.","filter_options":[]}],"Cloudflare Status":[{"display_name":"Maintenance Event Notification","type":"maintenance_event_notification","description":"A maintenance on a point of presence has been scheduled, changed, or canceled","filter_options":[{"Key":"airport_code","ComparisonOperator":"==","Range":"0-n","AvailableValues":null},{"Key":"event_type","ComparisonOperator":"==","Range":"0-n","AvailableValues":null}]},{"display_name":"Incident Alert","type":"incident_alert","description":"Cloudflare is experiencing an incident","filter_options":[{"Key":"affected_components","ComparisonOperator":"contains_object_with_id","Range":"0-n","AvailableValues":null},{"Key":"incident_impact","ComparisonOperator":"==","Range":"0-n","AvailableValues":[{"ID":"INCIDENT_IMPACT_NONE","Description":"Incidents Without Any Impact"},{"ID":"INCIDENT_IMPACT_MINOR","Description":"Minor Incidents"},{"ID":"INCIDENT_IMPACT_MAJOR","Description":"Major Incidents"},{"ID":"INCIDENT_IMPACT_CRITICAL","Description":"Critical Incidents"}]}]}],"Cloudforce One":[{"display_name":"Cloudforce One Stakeout Credential Leak Alert","type":"stakeout_credential_leak_alert","description":"Get notifications when leaked credentials matching your domain are detected","filter_options":[]},{"display_name":"Cloudforce One Containers Security Alert","type":"containers_security_alert","description":"Get notifications when a potential threat has been identified in Containers","filter_options":[]},{"display_name":"Cloudflare Closed Port Scan Alert","type":"closed_port_scan_alert","description":"Get notifications when Cloudflare detects newly closed ports","filter_options":[]},{"display_name":"Cloudflare Open Port Scan Alert","type":"open_port_scan_alert","description":"Get notifications when Cloudflare detects newly open ports","filter_options":[]},{"display_name":"Cloudforce One Threat Events Saved Query Daily Digest Alert","type":"stakeout_saved_query_daily_digest_alert","description":"Get daily notifications with new threat events that were detected for your saved queries","filter_options":[{"Key":"query_id","ComparisonOperator":"==","Range":"1-1","AvailableValues":null}]},{"display_name":"Cloudforce One Threat Events Saved Query Immediate Alert","type":"stakeout_saved_query_immediate_alert","description":"Get immediate notifications when new threat events for your saved queries are detected","filter_options":[{"Key":"query_id","ComparisonOperator":"==","Range":"1-1","AvailableValues":null}]}],"DEX":[{"display_name":"Synthetic Test Latency Event","type":"synthetic_test_latency_alert","description":"Significant change in synthetic application test latency","filter_options":[]},{"display_name":"Device Connectivity Anomaly","type":"device_connectivity_anomaly_alert","description":"Significant change in device connectivity status","filter_options":[]},{"display_name":"Synthetic Test Low Availability Event","type":"synthetic_test_low_availability_alert","description":"Synthetic application test availability falls below a configured threshold","filter_options":[]}],"DoS Protection":[{"display_name":"HTTP DDoS Attack Alert","type":"dos_attack_l7","description":"Cloudflare detects and mitigates an HTTP DDoS attack against one of your domains","filter_options":[]}],"Health Checks":[{"display_name":"Health Checks status notifier","type":"health_check_status_notification","description":"Notifications generated on health check status changes","filter_options":[{"Key":"health_check_id","ComparisonOperator":"==","Range":"0-n","AvailableValues":null},{"Key":"status","ComparisonOperator":"==","Range":"1-n","AvailableValues":null}]}],"Images":[{"display_name":"Image Transformation Notifications","type":"image_resizing_notification","description":"Get an email about your image transformation quota exhaustion","filter_options":[]}],"Load Balancing":[{"display_name":"Pool Enablement","type":"load_balancing_pool_enablement_alert","description":"Pool alerts based on enable/disable toggle status","filter_options":[{"Key":"pool_id","ComparisonOperator":"==","Range":"0-n","AvailableValues":null},{"Key":"enabled","ComparisonOperator":"==","Range":"1-n","AvailableValues":null}]},{"display_name":"Load Balancing Health Alert","type":"load_balancing_health_alert","description":"Load Balancing Health Alerts for Pools and Origins","filter_options":[{"Key":"pool_id","ComparisonOperator":"==","Range":"0-n","AvailableValues":null},{"Key":"event_source","ComparisonOperator":"==","Range":"0-n","AvailableValues":null},{"Key":"new_health","ComparisonOperator":"==","Range":"0-n","AvailableValues":null}]}],"Logpush":[{"display_name":"Failing Logpush Job Disabled","type":"failing_logpush_job_disabled_alert","description":"Logpush job failing to push successfully for > 24h disabled.","filter_options":[]}],"Magic Transit":[{"display_name":"Magic Network Monitoring: Volumetric Attack","type":"fbm_volumetric_attack","description":"Volumetric DDoS attacks to your infrastructure based on flow data you export to Cloudflare","filter_options":[]},{"display_name":"Magic Network Monitoring: DDoS Attack","type":"fbm_dosd_attack","description":"Fine grained Magic Network Monitoring DDoS Attacks based on your sflow data","filter_options":[]},{"display_name":"Magic Network Monitoring: Auto Advertisement","type":"fbm_auto_advertisement","description":"Auto Advertisement of a set of predefined prefixes using Magic Transit, following a recent attack","filter_options":[]}],"NSC Maintenance Notifications":[{"display_name":"CNI Connection Maintenance Alert","type":"cni_maintenance_notification","description":"Maintenance alerts for CNI connections","filter_options":[]}],"Pages":[{"display_name":"Pages Alerts","type":"pages_event_alert","description":"Pages Alerts","filter_options":[{"Key":"project_id","ComparisonOperator":"==","Range":"1-n","AvailableValues":null},{"Key":"environment","ComparisonOperator":"==","Range":"1-n","AvailableValues":null},{"Key":"event","ComparisonOperator":"==","Range":"1-n","AvailableValues":null}]}],"Radar Notification":[{"display_name":"Radar notifications","type":"radar_notification","description":"Radar Notifications","filter_options":[{"Key":"event_type","ComparisonOperator":"==","Range":"0-n","AvailableValues":[{"ID":"BGP_LEAK","Description":"BGP leak"},{"ID":"BGP_HIJACK","Description":"BGP hijack"},{"ID":"TRAFFIC_ANOMALY","Description":"Traffic anomaly"},{"ID":"TRAFFIC_OUTAGE","Description":"Traffic outage (verified)"}]},{"Key":"affected_asns","ComparisonOperator":"contains","Range":"0-n","AvailableValues":null},{"Key":"affected_locations","ComparisonOperator":"contains","Range":"0-n","AvailableValues":null},{"Key":"affected_origins","ComparisonOperator":"contains","Range":"0-n","AvailableValues":null}]}],"Route Leak Detection":[{"display_name":"Route Leak Detection Alert","type":"bgp_hijack_notification","description":"Alerts for BGP Hijack","filter_options":[]}],"SSL/TLS":[{"display_name":"Zone-level Authenticated Origin Pulls Certificate Expiration Alert","type":"zone_aop_custom_certificate_expiration_type","description":"Expiration notices for custom uploaded zone-level Authenticated Origin Pulls certificates","filter_options":[]},{"display_name":"Hostname-level Authenticated Origin Pulls Certificate Expiration Alert","type":"hostname_aop_custom_certificate_expiration_type","description":"Expiration notices for custom uploaded hostname-level Authenticated Origin Pulls certificates","filter_options":[]},{"display_name":"mTLS Certificate Store Certificate Expiration Alert","type":"mtls_certificate_store_certificate_expiration_type","description":"Expiration notices for customer uploaded mTLS certificates","filter_options":[]},{"display_name":"SSL for SaaS Custom Hostnames Alert","type":"custom_ssl_certificate_event_type","description":"Custom Hostname Certificate validation status, issuance, renewal, and expiration notices","filter_options":[]},{"display_name":"Access mTLS Certificate Expiration Alert","type":"access_custom_certificate_expiration_type","description":"Expiration notices for Access custom uploaded certificates","filter_options":[]},{"display_name":"Advanced Certificate Alert","type":"dedicated_ssl_certificate_event_type","description":"Advanced Certificate validation status, issuance, renewal, and expiration notices","filter_options":[]},{"display_name":"Universal SSL Alert","type":"universal_ssl_event_type","description":"Universal Certificate validation status, issuance, renewal, and expiration notices","filter_options":[]}],"Script Monitor":[{"display_name":"Page Shield New Malicious Script Alert","type":"scriptmonitor_alert_new_malicious_scripts","description":"Receive an alert whenever a JavaScript file loaded by your users is classified as malicious.","filter_options":[{"Key":"zones","ComparisonOperator":"==","Range":"0-n","AvailableValues":null}]},{"display_name":"Page Shield New Malicious Domain Alert","type":"scriptmonitor_alert_new_malicious_hosts","description":"Receive an alert whenever a resource loaded by your users is hosted under a domain reported as malicious.","filter_options":[{"Key":"zones","ComparisonOperator":"==","Range":"0-n","AvailableValues":null}]},{"display_name":"Page Shield New Malicious URL Alert","type":"scriptmonitor_alert_new_malicious_url","description":"Receive an alert whenever a resource loaded by your users is from a URL reported as malicious.","filter_options":[{"Key":"zones","ComparisonOperator":"==","Range":"0-n","AvailableValues":null}]},{"display_name":"Page Shield New Code Change Detection Alert","type":"scriptmonitor_alert_new_code_change_detections","description":"Receive an alert whenever a code change is detected in a script getting monitored.","filter_options":[{"Key":"zones","ComparisonOperator":"==","Range":"0-n","AvailableValues":null}]},{"display_name":"Page Shield New Resources Alert","type":"scriptmonitor_alert_new_resources","description":"Receive an alert whenever your users load a new resource that has not been previously seen.","filter_options":[{"Key":"zones","ComparisonOperator":"==","Range":"0-n","AvailableValues":null}]},{"display_name":"Page Shield New Domain Alert","type":"scriptmonitor_alert_new_hosts","description":"Receive an alert whenever your users load a resource from a new domain not previously seen.","filter_options":[{"Key":"zones","ComparisonOperator":"==","Range":"0-n","AvailableValues":null}]},{"display_name":"Page Shield New Resource URL Exceeds Max Length Alert","type":"scriptmonitor_alert_new_max_length_resource_url","description":"Receive an alert whenever we detect a resource with a very large URL","filter_options":[]}],"Security Insights":[{"display_name":"Security Insights Alert","type":"security_insights_alert","description":"Get alerts for new Security Insights","filter_options":[{"Key":"insight_class","ComparisonOperator":"==","Range":"0-n","AvailableValues":null}]}],"Stream":[{"display_name":"Stream Live Notifications","type":"stream_live_notifications","description":"Get webhook or email notifications about your live stream","filter_options":[{"Key":"input_id","ComparisonOperator":"==","Range":"0-n","AvailableValues":null},{"Key":"event_type","ComparisonOperator":"==","Range":"0-n","AvailableValues":null}]}],"Traffic Monitoring":[{"display_name":"Advanced Error Rate Alert","type":"advanced_http_alert_error","description":"High levels of HTTP errors at your origin or edge","filter_options":[{"Key":"zones","ComparisonOperator":"==","Range":"1-n","AvailableValues":null},{"Key":"slo","ComparisonOperator":"<=","Range":"1-1","AvailableValues":null},{"Key":"alert_trigger_preferences","ComparisonOperator":"==","Range":"0-1","AvailableValues":null}]},{"display_name":"Traffic Anomalies Alert","type":"traffic_anomalies_alert","description":"Traffic anomalies in your HTTP traffic","filter_options":[{"Key":"zones","ComparisonOperator":"==","Range":"1-n","AvailableValues":null},{"Key":"alert_trigger_preferences","ComparisonOperator":"==","Range":"1-1","AvailableValues":[{"ID":"zscore_spike","Description":"algorithm for traffic spike (positive z-score)"},{"ID":"zscore_drop","Description":"algorithm for traffic drop (negative z-score)"},{"ID":"zscore_spike_and_drop","Description":"algorithm for both traffic drop and spike (z-score)"}]}]},{"display_name":"Passive Origin Monitoring","type":"real_origin_monitoring","description":"Cloudflare is unable to reach your origin","filter_options":[]},{"display_name":"Origin Error Rate Alert","type":"http_alert_origin_error","description":"High levels of 5xx HTTP errors at your origin","filter_options":[{"Key":"zones","ComparisonOperator":"==","Range":"1-n","AvailableValues":null},{"Key":"slo","ComparisonOperator":"<=","Range":"1-1","AvailableValues":null},{"Key":"alert_trigger_preferences","ComparisonOperator":"==","Range":"0-1","AvailableValues":null}]}],"Trust and Safety Blocks":[{"display_name":"Notifications for Block Review Rejection","type":"block_notification_review_rejected","description":"Get notifications when Cloudflare Trust & Safety rejects a request for block removal","filter_options":[]},{"display_name":"Notifications for Removed Blocks","type":"block_notification_block_removed","description":"Get notifications when Cloudflare Trust & Safety removes a block from your website","filter_options":[]},{"display_name":"Notifications for New Blocks","type":"block_notification_new_block","description":"Get notifications when Cloudflare Trust & Safety places a block in one of your websites","filter_options":[]}],"Tunnel":[{"display_name":"Tunnel Health Alert","type":"tunnel_health_event","description":"Cloudflare Tunnel Connection Status Change Alerts","filter_options":[{"Key":"tunnel_id","ComparisonOperator":"==","Range":"0-n","AvailableValues":null},{"Key":"new_status","ComparisonOperator":"==","Range":"0-n","AvailableValues":null}]},{"display_name":"Tunnel Created and Deleted Alert","type":"tunnel_update_event","description":"Cloudflare Tunnel Created and Deleted Alerts","filter_options":[]}],"WAF":[{"display_name":"Advanced Security Events Alert","type":"clickhouse_alert_fw_ent_anomaly","description":"Cloudflare detects a spike in security events against one of your zones","filter_options":[{"Key":"zones","ComparisonOperator":"==","Range":"1-n","AvailableValues":null},{"Key":"actions","ComparisonOperator":"==","Range":"0-n","AvailableValues":null},{"Key":"services","ComparisonOperator":"==","Range":"1-n","AvailableValues":null}]},{"display_name":"Security Events Alert","type":"clickhouse_alert_fw_anomaly","description":"Cloudflare detects a spike in security events against one of your zones","filter_options":[{"Key":"zones","ComparisonOperator":"==","Range":"1-n","AvailableValues":null},{"Key":"actions","ComparisonOperator":"==","Range":"0-n","AvailableValues":null}]}],"Web Analytics":[{"display_name":"Web Analytics Metrics Update","type":"web_analytics_metrics_update","description":"Receive regular Web Analytics metrics updates by email","filter_options":[]}],"Workers Observability":[{"display_name":"Alert Policy","type":"workers_observability_alert","description":"Configure how you want to be notified when your Workers Observability alerts fire","filter_options":[{"Key":"status","ComparisonOperator":"==","Range":"1-n","AvailableValues":[{"ID":"FIRING_FAILED","Description":"Alert is actively firing due to a failure"},{"ID":"NORMAL","Description":"Alert has resolved and returned to normal state"}]}]}]}