Captive portal access

Triggered when a user accesses the captive portal.

Alert name: ALERT_CAPTIVE_PORTAL_ACCESS

Payload

{
  "metadata": {
    "alert_name": "ALERT_CAPTIVE_PORTAL_ACCESS",
    "network_name": "Main Office",
    "timestamp": "2026-01-23T21:40:03Z"
  },
  "data": {
    "ip": "192.168.1.100",
    "mac_address": "AA:BB:CC:DD:EE:FF",
    "name": "John Smith",
    "email": "john.smith@example.com",
    "created_at": "2026-01-23T21:40:03Z",
    "needs_approval": false
  }
}

Fields

FieldTypeDescription
ipstringIP address of the client
mac_addressstringMAC address of the client
namestringName provided by the user (if collected)
emailstringEmail provided by the user (if collected)
created_atstringTimestamp of the access request
needs_approvalbooleanWhether the request requires manual approval
Was this helpful?
PreviousAudit logNextConfig flaps