Start threat activity exports on schedule
Make the start of a CyberSight CSV export a scheduled task, so preparing activity data does not rely on memory.
Trigger
Recurring schedule
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Action
Create CyberSight CSV Export
Starts an asynchronous CyberSight activity log export to CSV; a download link is provided when ready.
Why this helps
Preparing threat activity data for review can become a recurring manual task that is easy to postpone.
- Start an asynchronous export on a predictable schedule.
- Reduce repetitive report preparation steps.
- Keep the export initiation visible in a Notis run report.
Setup
Build it in a few focused steps.
- 1Connect DNSFilter once in the Notis portal.
- 2Create an automation in the portal or tell Notis to create one.
- 3In one instruction, say to create a CyberSight CSV export for the intended activity review.
- 4Pick a recurring schedule and choose where run reports should go.
- 5Test once and review the export record or tracking UUID in the run report.
Questions about this workflow
Will the CSV be ready when the automation finishes?
The export is processed asynchronously. The action starts the export and returns a UUID for tracking its status.
Can this choose a time range for exported activity?
The listed action description does not specify its filtering fields. Confirm the available input details in the DNSFilter action before relying on a particular time range.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link AimTell to Dnsfilter. A trigger fires from one place; an action lands in another.
AimTell triggers
Dnsfilter actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create IP Address
Adds an IP address to a network for filtering policies.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Add Allowed Application
Allows an application through a policy, regardless of other blocking rules.
Get Application Category
Retrieves details about an application category.
Add Allowlist Domains to Policies
Adds domains to the allow lists of multiple policies, bypassing their filtering rules.
Get Billing Information
Retrieves billing records for an organization, including amounts and billing periods.
Add Blacklist Category To Policy
Adds a content category to a policy’s block list without changing other settings.
Get Category
Retrieves basic information about a category.
Add Blacklist Domain To Policy
Blocks a domain for users covered by a policy.
Connect any two apps with Notis in the middle.
AimTell and Dnsfilter, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.