Skip to content

Isolation Status Changed

The Isolation Status Changed trigger starts an automation when an asset becomes isolated or unisolated, whether the change was made by a user, an API call, or another automation.

Use it to keep people and systems informed about containment, for example to post a Slack message when an asset is isolated, or to open a ticket in your ITSM tool through an HTTP request.

Isolation Status Changed: Trigger settings

Isolation Status Changed: Trigger settings

SettingDescription
Target scopeThe assets the automation runs for. See Asset targeting.
Run when the isolation status becomesAny isolation change, Only isolated, or Only unisolated.
FieldExample expression
Asset name, platform, OS, IP address, and group{{isolation-status-changed.endpointName}}
New isolation status{{isolation-status-changed.isolationState}}
  • This trigger is only available when the Isolation feature is enabled on your Console.
  • Isolation changes made by the Isolate Device action also start this trigger.