Notifications
Filtering Notifications
You can use the notifications
filter to search and filter notifications in the
Turbot Guardrails Console or using GraphQL queries.
The
notifications
filter supports the standardsort
andlimit
keywordsYou can search standard Guardrails metadata properties such as
timestamp
,actor
. Note that you cannot searchtitle
because notifications do not have a title.The
type
keyword can filter on any specific notification types.Use the
notificationType
keyword to filter on the general type of notifications. This will filter all create, update, and delete notifications of a given class. Supported values are:resource
action
policySetting
policyValue
control
grant
activeGrant
You can filter the scope with Hierarchy Scope Filters. Note that these are implicitly set when filtering the notifications page in the Guardrails Console.
Supported keywords are:
resource
level
resourceType
resourceTypeId
resourceTypeLevel
controlType
controlTypeId
controlTypeLevel
policyType
policyTypeId
policyTypeLevel
Note the following limitations:
Tag filters do not work with notifications.
Full text search does not work with notifications.
You cannot use
$.
to search and filter notifications
Examples
Aim | Filter text |
---|---|
Notifications for resources, newest first | notificationType:resource sort:-timestamp |
The last 100 deletion notifications of any type | notificationType:resourceDeleted,policySettingDeleted,policyValueDeleted,controlDeleted,actionDeleted,scheduledActionDeleted,grantDeleted,activeGrantsDeleted,favoriteDeleted,watchDeleted sort:-timestamp limit:100 |
Recent permissions activity | notificationType:activeGrant,grant sort:-timestamp |
Notifications for a resource and its descendants for the last 2 hours | resource:162675146433353 timestamp:>T-2h sort:-timestamp |
Notifications for a resource only (NOT its descendants) | resource:162675146433353 level:self sort:-timestamp |
Control notifications related to AWS > S3 > Bucket > Approved | notificationType:control controlType:tmod:@turbot/aws-s3#/control/types/bucketApproved sort:-timestamp |
Policy notifications for all AWS > S3 > Approved policies and sub-policies | notificationType:policyValue,policySetting policyType:tmod:@turbot/aws-s3#/policy/types/bucketApproved sort:-timestamp |
Notifications for a specific actor (user) with it's profileId | actorIdentityId:162674901433086 |