Bring network query logs into device alert investigations
Send an alert with a profile and time window to Notis, then retrieve matching Control D analytics logs for a concise investigation report.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Get Profile Analytics Logs
Retrieve DNS query activity logs for a profile.
Why this helps
When an alert and network activity are in different tools, checking whether they happened around the same time takes extra steps.
- Gather logs for the profile and date filters supplied with an alert
- Keep the alert and returned log context together
- Make follow-up investigation easier to resume
Setup
Build it in a few focused steps.
- 1Connect Adafruit IO and Control D once in the Notis portal.
- 2Create an automation to retrieve logs for the supplied profile and date window and summarize relevant entries.
- 3Choose the Notis webhook trigger and a channel for run reports.
- 4Test with a real alert and a valid profile and date filter.
Questions about this workflow
What does the alert need to provide?
Provide a Control D profile identifier and a useful date filter. The workflow can only query logs for the information supplied.
Does this prove a device caused a query?
No. The logs provide profile activity for investigation; they do not by themselves establish which IoT device caused it.
Can the workflow run on a schedule instead?
This workflow is designed to start from a webhook alert. A recurring review can be created separately with a Notis schedule.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Adafruit IO to Control d. A trigger fires from one place; an action lands in another.
Adafruit IO triggers
Control d actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Delete Device by ID
Permanently deletes a device, breaking DNS resolution on gadgets using its resolvers.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Delete Profile
Permanently deletes a profile only if no devices enforce it; assigned profiles cannot be deleted.
Delete Profile Rule by Rule ID
Delete a custom DNS filtering rule from a profile.
Delete Rule from Folder
Permanently deletes a custom DNS rule from a profile folder.
Delete Profile Schedule
Delete a schedule from a profile.
List Known Access IPs
List recent IP addresses used to query a device.
Get Analytics Endpoints
Lists available analytics regions and their endpoints.
Get Analytics Levels
Lists the available analytics levels for devices.
Connect any two apps with Notis in the middle.
Adafruit IO and Control d, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Control d.