Bulk report confirmed abusive IPs after a leave change
Keep incident follow-up moving when leave changes affect an active investigation.
Trigger
Worker Leave of Absence Changed
Triggers when a worker's leave of absence record changes. This trigger monitors all leaves of absence for a specific worker and detects: - New leave requests created - Changes to existing leaves (status, dates, comments, etc.) - Deleted or rescinded leaves Uses snapshot-based diffing to track changes between polling intervals.
Action
Bulk Report
Tool to submit multiple ip abuse reports in bulk. use when you need to report a large set of ips at once by uploading a csv file with required headers. csv must include columns: ip, categories, reportdate, comment.
Why this helps
Security reporting can stall when the responsible owner is unavailable during a leave transition.
- Keeps confirmed reports moving
- Supports multiple IPs in one submission
- Creates a clear operational handoff
Setup
Build it in a few focused steps.
- 1Connect Workday and Abuselpdb in Notis once.
- 2Create an automation in Automations with a name and prompt.
- 3Tell Notis to submit the user supplied CSV of confirmed abusive IPs, requiring ip, categories, reportdate, and comment columns.
- 4Pick Worker Leave of Absence Changed as the trigger.
- 5Choose a report channel and test with one real leave change and a prepared CSV.
Questions about this workflow
Will Notis invent CSV values?
No. The CSV and required values must be supplied by you.
Can this report unconfirmed addresses?
Use it only when your instruction provides confirmed reports and complete required columns.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Workday to Abuselpdb. A trigger fires from one place; an action lands in another.
Workday triggers
Abuselpdb actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Retrieve IP Blacklist
Tool to retrieve a list of the most reported ip addresses. use when building dynamic blocklists or threat intelligence feeds.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Bulk Report
Tool to submit multiple ip abuse reports in bulk. use when you need to report a large set of ips at once by uploading a csv file with required headers. csv must include columns: ip, categories, reportdate, comment.
Absence Balance Changed
Triggers when a worker's absence balance changes. This trigger monitors a specific worker's absence plan balance and detects any changes to the balance details including quantity available, effective date, position, or other related fields. Uses snapshot-based diffing to detect meaningful changes.
Check Block
Tool to check the reputation of all ip addresses in a cidr range. use when you need aggregated abuse data for a network block.
Balance Details Changed
Triggers when details of a specific balance change (quantity, accruals, adjustments, etc.). This trigger monitors a specific worker's absence plan balance and detects any changes to the balance details including quantity available, effective date, position, or other related fields. Uses snapshot-based diffing to detect meaningful field changes.
Check IP Reputation
Tool to check the reputation of an ip address. use when you need to determine if an ip address has been reported for abusive activity within a specified look-back period. example: checkip(ipaddress='8.8.8.8', maxageindays=90).
Interview Feedback Submitted or Updated
Triggers when interview feedback is submitted or updated for a specific interview. This trigger monitors a specific interview and fires when new feedback entries are detected or existing feedback is modified.
Clear Address Reports
Tool to remove all reports associated with a specific ip address. use when you need to purge your own abuse records after verifying control of the ip.
Job Posting Changed
Triggers when a specific job posting's details change (title, status, posting dates, location, etc.). This trigger monitors a single job posting and fires when any of its fields are modified.
Get Abuse Reports
Tool to retrieve a list of abuse reports for a specific ip address. use when you need to fetch historic reports with optional filtering by status, date range, reporter, and pagination.
Job Posting Questionnaire Changed
Triggers when a job posting's candidate questionnaire is added or changed. This trigger monitors a specific job posting's questionnaires and detects any changes including additions, removals, or modifications to questionnaires and questions. Uses snapshot-based diffing to detect meaningful changes.
New Absence Balance
Triggers when a new absence balance record becomes available for a worker. This trigger monitors a specific worker's absence balances and detects when new balance records appear (e.g., a new plan/bucket becomes available). Uses snapshot-based diffing to compare balance record IDs between polls.
Connect any two apps with Notis in the middle.
Workday and Abuselpdb, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.