Port blocked
Triggered when a switch port is blocked (e.g., due to security policy).
Alert name: ALERT_PORT_BLOCKED
Payload
{
"metadata": {
"alert_name": "ALERT_PORT_BLOCKED",
"network_name": "Main Office",
"timestamp": "2026-01-23T21:40:03Z"
},
"data": {
"device": {
"label": "Core Switch 1",
"device_type": "switch"
},
"blocked_port_numbers": [12, 15, 24]
}
}Fields
| Field | Type | Description |
|---|---|---|
device.label | string | Name of the switch |
device.device_type | string | Type of device |
blocked_port_numbers | array of integers | Port numbers that were blocked |