topic SAS Visual Investigator: Send and E-mail automatically when an alert is created in Fraud, AML and Security Intelligence

SAS Visual Investigator: Send and E-mail automatically when an alert is created

BigRider — Wed, 21 Sep 2022 14:21:12 GMT

Hi Experts,

I have a particular requirement from a customer, they would like to send a e-mail automatically when an alert is created.

1. Is there an automatic feature directly in SAS Visual Investigator to do that ?

2. There is a API endpoint to get alerts created filtering from a specific date as parameter ?

3. Should we create a process reading directly from internal SVI database (Postgres) ?

Thanks in advance,

Regards,

Re: SAS Visual Investigator: Send and E-mail automatically when an alert is created

_austin_ — Fri, 30 Sep 2022 15:23:46 GMT

Hello,

1. No, there is not an automatic feature for sending emails on alert creation.

2. Sure, there is an REST endpoint for finding alerts created since a specific timestamp. This URL will find all alerts created after midnight on September 6th.

GET http://{{host}}:{{port}}/svi-alert/alerts?filter=gt(alertVersionTimeStamp,2022-09-06)

You could also use an ISO 8601 timestamp rather than a date but make sure to include timezone information.

GET http://{{host}}:{{port}}/svi-alert/alerts?filter=gt(alertVersionTimeStamp,2022-09-05T19:00:00.000-05:00)

If you wanted to limit your query to a certain alert domain, you could enhance the query like this:

GET http://{{host}}:{{port}}/svi-alert/alerts?filter=and(gt(alertVersionTimeStamp,2022-09-06),eq(domainId,mydomain))

Note: I am matching on the field alertVersionTimeStamp, not creationTimeStamp. creationTimeStamp is only set when the first version of the alert is created. If the alert is closed and then re-opened for new activity some time later, the alertVersionTimeStamp will be set for the new "version" of the alert but creationTimeStamp will remain set to the time the first alert version was created.

3. If you want to create an external process that polls for new alerts and sends emails, I would suggest you use the REST call rather than reading from the database directly.

Re: SAS Visual Investigator: Send and E-mail automatically when an alert is created

BigRider — Fri, 30 Sep 2022 16:40:31 GMT

Thanks @_austin_ !

It´s a good way to meet customer requirments.

Regards,

Bila