Email notification whenever a user with admin privilege exports a file

June Anderson
Tera Contributor

Hi 

 

Need to create an email notification to be sent out to my security team whenever a user with admin privileges exports any kind of file within the instance. 

 

I created an email notification based on an event name that triggers when a file is exported but unable to get any email.  Please note this event name is OOTB 

 

SEE MY NOTIFICATION BELOW 

JuneAnderson_0-1701464908818.png

 

I read somewhere the event name that triggers is appsec.security.export and I have updated my event name to this for testing but have had no success 

 

Any help and or suggestion will be appreciated

 

 

The goal is to send email notification when user has admin privileges only roles and any type of file export is done.

 

 

1 REPLY 1

Dan Covic2
Tera Contributor

Try with this event instead: appsec.security.exports.admin