Automation smart values - content scanning alerts
These smart values apply to the Content scanning alert for Jira trigger, which is available with Atlassian Guard Premium.
{{detectAlert}}
Alert details
The body and metadata related to the alert.
{{detectAlert.title}}- The title of the alert.{{detectAlert.description.text}}- Describes the activity that triggered the alert. This is the body of the alert in plain text format.{{detectAlert.id}}- The ID number that uniquely identifies the alert.{{detectAlert.created}}- Timestamp of the alert in ISO 8601 format. This is the time the alert was generated.{{detectAlert.status}}- Current status of the alert.{{detectAlert.url}}- URL to view the alert in Guard Detect.{detectAlert.type}}- The alert type. Indicates what the alert is detecting, such as credit card numbers{{detectAlert.workspace.url}}- URL of the Guard Detect instance that generated the alert.{{detectAlert.description.markdown}}- Describes the activity that triggered the alert. This is the body of the alert in markdown format.{{detectAlert.investigationSteps.text}}- The recommended investigation steps for the alert in plain text format.{{detectAlert.investigationSteps.markdown}}- The recommended investigation steps for the alert in markdown format.{{detectAlert.remediationOptions.text}}- The suggested remediation options for the alert in plain text format.{{detectAlert.remediationOptions.markdown}}- The suggested remediation options for the alert in markdown format.
Alert activity details
Details of the activity that triggered the alert.
{{detectAlert.time.start}}- Timestamp of the activity that triggered the alert in ISO 8601 format. For alerts that contain multiple activities, it's the first activity.{{detectAlert.time.end}}- Timestamp of the last activity included in the alert in ISO 8601 format. Empty for alerts that contain a single activity.{{detectAlert.product}}- The product where the activity that triggered the alert happened.{{detectAlert.workspace.ari}}- Metadata about the Guard Detect instance that generated the alert (array).
Alert actor detail
Details of the actor, which is the person who performed the action that triggered the alert.
{{detectAlert.actor.id}}- The ID number that uniquely identifies the person who performed the action that triggered the alert.{{detectAlert.actor.displayName}}- The display name used by the person who performed the action that triggered the alert.{{detectAlert.actor.email}}- The email address of the person who performed the action that triggered the alert.{{detectAlert.actor.profilePicture}}- The profile picture for the person who performed the action that triggered the alert.{{detectAlert.actor.guardDetectProfileUrl}}- URL for the Guard Detect actor profile for the person who performed the action that triggered the alert.{{detectAlert.actor.accountCreated}}- Account creation date for the person who performed the action that triggered the alert.{{detectAlert.actor.lastLoginTime}}- Timestamp from the last login for the person who performed the action that triggered the alert in ISO 8601 format.{{detectAlert.actor.lastLoginLocation}}- Geographic location from the last login for the person who performed the action that triggered the alert.
Detection details
Details of the detection, which is the criteria used to determine whether to generate an alert.
{{detectAlert.detection.title}}- Title of the detection that generated the alert.{{detectAlert.detection.category}}- Category of the detection that generated the alert. Used to differentiate content scanning and user activity detections.{{detectAlert.detection.type}}- Type of detection that generated the alert. Used to differentiate between system (core) and custom detections.{{detectAlert.detection.ari}}- Metadata about the detection that generated the alert (array).
Alert resources
{{detectAlert.linkedResources.ID}}- The ID number that uniquely identifies any resources linked to the alert.{{detectAlert.linkedResources.URL}}- URL of any resource linked to the alert.
Was this helpful?