Create Better Stack source groups for audit scopes
Keep log sources organized as your compliance scope changes.
Trigger
Recurring schedule
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Action
Create Source Group
Tool to create a new source group. use when you have finalized the group name (and optional sort index) and need to organize related log sources under that group.
Why this helps
New audit scopes can leave log sources mixed together, slowing investigations and evidence review.
- Creates source groups for finalized scopes
- Keeps evidence-oriented logs easier to find
- Runs during a predictable review cadence
Setup
Build it in a few focused steps.
- 1Connect 21risk and Better Stack in Notis.
- 2Create an automation named Audit source group setup.
- 3Tell Notis to create a Better Stack source group from finalized 21risk scope notes available at each run.
- 4Choose notis_cron and set the review schedule.
- 5Choose the report destination and test with one scope.
Questions about this workflow
Where does the scope come from?
Supply the finalized 21risk scope in the prompt context or data sent to the automation.
Can it create groups from draft scopes?
Configure the instruction to act only on finalized scopes; drafts should be skipped and reported.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link 21risk to Better stack. A trigger fires from one place; an action lands in another.
21risk triggers
Better stack actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create Escalation Policy
Tool to create a new escalation policy. use when defining how incidents should escalate across team members.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Create Heartbeat Group
Tool to create a new heartbeat group. use when you need to organize related heartbeat checks under a single, logical group. example prompt: "create a new heartbeat group named 'backend services'."
Create Outgoing Webhook Integration
Tool to create a new outgoing webhook integration. use when you need to register an endpoint to receive event notifications from better stack.
Create Source Group
Tool to create a new source group. use when you have finalized the group name (and optional sort index) and need to organize related log sources under that group.
Delete Escalation Policy
Tool to delete an escalation policy by id. use when you need to permanently remove an existing escalation policy after confirming its id.
Delete Source Group
Tool to delete a source group by id. use when you need to permanently remove an existing source group after confirming it is no longer needed.
Get Heartbeat
Tool to get a single heartbeat by id. use when you need to fetch details of a specific heartbeat.
Get Heartbeat Availability
Tool to retrieve availability summary for a specific heartbeat. use when you need availability metrics for a heartbeat within an optional date range.
Connect any two apps with Notis in the middle.
21risk and Better stack, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Better stack.