Skip to main content
Triggered when a switch port is blocked (e.g., due to security policy). Alert name: ALERT_PORT_BLOCKED

​
Payload

{
  "metadata": {
    "alert_name": "ALERT_PORT_BLOCKED",
    "network_name": "Main Office",
    "timestamp": "2026-01-23T21:40:03Z"
  },
  "data": {
    "device": {
      "label": "Core Switch 1",
      "device_type": "switch"
    },
    "blocked_port_numbers": [12, 15, 24]
  }
}

​
Fields

FieldTypeDescription
device.labelstringName of the switch
device.device_typestringType of device
blocked_port_numbersarray of integersPort numbers that were blocked